CVE-2021-20275: Buffer Overflow
Published Mar 8, 2021
·Updated
A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunkedbodyiscomplete() leading to denial of service.
Affected Software
3 affected componentsFixes available
redhat/privoxy<3.0.32
3.0.32
Privoxy privoxy<3.0.32
Debian Debian Linux=9.0
Remediation
Patch Available
Event History
Mar 9, 2021
CVE Published
via MITRE·01:12 PM
Data Sourced
via MITRE·01:12 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this flaw in Privoxy?
The vulnerability ID for this flaw in Privoxy is CVE-2021-20275.
2
What is the severity of CVE-2021-20275?
The severity of CVE-2021-20275 is high with a severity value of 7.5.
3
How does CVE-2021-20275 impact Privoxy?
CVE-2021-20275 may lead to a denial of service by causing an invalid read of size two in chunked_body_is_complete().
4
Which software versions are affected by CVE-2021-20275?
Privoxy versions up to and excluding 3.0.32 and Debian Linux version 9.0 are affected by CVE-2021-20275.
5
How can I fix the vulnerability CVE-2021-20275?
To fix the vulnerability, update Privoxy to version 3.0.32 or newer and Debian Linux to a version higher than 9.0.