Skip to content
OpenAdvisories
Unscored CVE-2021-20274 EUVD-2021-7708GHSA-g899-mr4g-v86j

A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server misbehaves.

Published Mar 9, 2021 · Updated Aug 3, 2024 · Assigned by redhat

Description

A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server misbehaves.

Affected products

VendorProductAffectedFixed
— privoxy privoxy 3.0.32 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 privoxy 3.0.32-1 —
Debian 13 privoxy 3.0.32-1 —
Debian 12 privoxy 3.0.32-1 —
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP2 privoxy 3.0.32-bp152.4.9.1 openSUSE-SU-2021:0460-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed privoxy 3.0.32-2.3 openSUSE-SU-2024:11193-1
openSUSE Leap 15.2 privoxy 3.0.32-lp152.3.9.1 openSUSE-SU-2021:0443-1
ReleasePackageFixed inAdvisory
Alpine v3.24 privoxy 3.0.32-r0 —
Alpine v3.23 privoxy 3.0.32-r0 —
Alpine v3.22 privoxy 3.0.32-r0 —
Alpine v3.21 privoxy 3.0.32-r0 —
Alpine v3.20 privoxy 3.0.32-r0 —
Show 8 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 privoxy 3.0.32-r0 —
Alpine v3.18 privoxy 3.0.32-r0 —
Alpine v3.17 privoxy 3.0.32-r0 —
Alpine v3.16 privoxy 3.0.32-r0 —
Alpine v3.15 privoxy 3.0.32-r0 —
Alpine v3.14 privoxy 3.0.32-r0 —
Alpine v3.13 privoxy 3.0.32-r0 —
Alpine v3.12 privoxy 3.0.32-r0 —

Advisories 3

References