CVE-2020-35502: High severity privoxy vulnerability
A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running out of memory can lead to a system crash.
Other sources
Memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running out of memory
Upstream Patch:
https://www.privoxy.org/gitweb/?p=privoxy.git;a=commit;h=bbd53f1010b https://www.privoxy.org/gitweb/?p=privoxy.git;a=commit;h=4490d451f9b
External References:
https://www.privoxy.org/3.0.29/user-manual/whatsnew.html
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-35502?
CVE-2020-35502 is a vulnerability found in Privoxy versions before 3.0.29 that can lead to a system crash due to memory leaks.
How severe is CVE-2020-35502?
CVE-2020-35502 has a severity score of 7.5, which is considered high.
Which software versions are affected by CVE-2020-35502?
Privoxy versions before 3.0.29 are affected by CVE-2020-35502.
How can I fix CVE-2020-35502?
To fix CVE-2020-35502, update your Privoxy installation to version 3.0.29.
Where can I find more information about CVE-2020-35502?
More information about CVE-2020-35502 can be found at the following references: [Bugzilla Red Hat](https://bugzilla.redhat.com/show_bug.cgi?id=1928749), [Gentoo Security](https://security.gentoo.org/glsa/202107-16), [Privoxy User Manual](https://www.privoxy.org/3.0.29/user-manual/whatsnew.html).