CVE-2021-20273

Description

References

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• lists.debian.org/debian-lts-announce/2021/03/msg00009.html · Third Party Advisory
• security.gentoo.org/glsa/202107-16 · Third Party Advisory
• privoxy.org/announce.txt · Release Notes

Weitere Schwachstellen in privoxy

• CVE-2021-44543MITTEL 6.1An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured …
• CVE-2021-44542HOCH 7.5A memory leak vulnerability was found in Privoxy when handling errors.
• CVE-2021-44541HOCH 7.5A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the…
• CVE-2021-44540HOCH 7.5A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing.
• CVE-2021-20209HOCH 7.5A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured.