CVE-2021-20217

Summary

CVE	CVE-2021-20217
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2021-03-25 19:15:00 UTC
Updated	2021-12-14 20:08:00 UTC
Description	A flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a crafted CGI request may lead to denial of service. The highest threat from this vulnerability is to system availability.

Risk And Classification

Problem Types: CWE-617

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Fedoraproject	Fedora	33	All	All	All
Application	Privoxy	Privoxy	All	All	All	All

References

Reference	Source	Link	Tags
1923252 – (CVE-2021-20217) CVE-2021-20217 privoxy: Assertion failure triggered by a crafted CGI request	MISC	bugzilla.redhat.com
Privoxy: Multiple vulnerabilities (GLSA 202107-16) — Gentoo security	GENTOO	security.gentoo.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

180514 Debian Security Update for privoxy (CVE-2021-20217)
198306 Ubuntu Security Notification for Privoxy Vulnerabilities (USN-4886-1)
500549 Alpine Linux Security Update for privoxy
504318 Alpine Linux Security Update for privoxy
710060 Gentoo Linux Privoxy Multiple vulnerabilities (GLSA 202107-16)
750369 OpenSUSE Security Update for privoxy (openSUSE-SU-2021:0265-1)