CVE-2021-20276: Buffer Overflow
Published Mar 8, 2021
·Updated
A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcrecompile() may lead to denial of service.
Affected Software
3 affected componentsFixes available
redhat/privoxy<3.0.32
3.0.32
Privoxy privoxy<3.0.32
Debian Debian Linux=9.0
Remediation
Patch Available
Event History
Mar 9, 2021
CVE Published
via MITRE·01:12 PM
Data Sourced
via MITRE·01:12 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2021-20276?
CVE-2021-20276 is a vulnerability found in Privoxy before version 3.0.32 that allows for invalid memory access, potentially leading to a denial of service.
2
What is the severity of CVE-2021-20276?
The severity of CVE-2021-20276 is high, with a severity score of 7.5.
3
Which software versions are affected by CVE-2021-20276?
Privoxy versions up to but excluding 3.0.32 and Debian Linux version 9.0 are affected by CVE-2021-20276.
4
How can I fix CVE-2021-20276?
To fix CVE-2021-20276, users should update Privoxy to version 3.0.32 or newer, or upgrade to a later version of Debian Linux.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2021-20276?
The CWE ID for CVE-2021-20276 is CWE-119.