CVE-2021-20273: Input Validation
Published Mar 8, 2021
·Updated
A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off.
Affected Software
3 affected componentsFixes available
redhat/privoxy<3.0.32
3.0.32
Privoxy privoxy<3.0.32
Debian Debian Linux=9.0
Remediation
Patch Available
Event History
Mar 9, 2021
CVE Published
via MITRE·01:11 PM
Data Sourced
via MITRE·01:11 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-20273.
2
What is the severity of CVE-2021-20273?
The severity of CVE-2021-20273 is high (7.5).
3
Which software versions are affected by CVE-2021-20273?
Privoxy versions up to (but not including) 3.0.32 and Debian Linux 9.0 are affected by CVE-2021-20273.
4
How can a crash occur in Privoy if toggled off?
A crash can occur in Privoxy if a crafted CGI request is sent while Privoxy is toggled off.
5
Are there any references available for CVE-2021-20273?
Yes, you can find references for CVE-2021-20273 [here](https://bugzilla.redhat.com/show_bug.cgi?id=1936658), [here](https://lists.debian.org/debian-lts-announce/2021/03/msg00009.html), and [here](https://security.gentoo.org/glsa/202107-16).