CVE-2021-20213
Fixed in a distro release EPSS 2%
A flaw was found in Privoxy in versions before 3.0.29. Dereference of a NULL-pointer that could result in a crash if accept-intercepted-requests was enabled, Privoxy failed to get the request destination from the Host header and a memory allocation failed.
Products: privoxy
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.12 | privoxy | 3.0.29-r0 |
| Alpine 3.13 | privoxy | 3.0.29-r0 |
| Alpine 3.14 | privoxy | 3.0.29-r0 |
| Alpine 3.15 | privoxy | 3.0.29-r0 |
| Alpine 3.16 | privoxy | 3.0.29-r0 |
| Alpine 3.17 | privoxy | 3.0.29-r0 |
| Alpine 3.18 | privoxy | 3.0.29-r0 |
| Alpine 3.19 | privoxy | 3.0.29-r0 |
| Alpine 3.20 | privoxy | 3.0.29-r0 |
| Alpine 3.21 | privoxy | 3.0.29-r0 |
| Alpine 3.22 | privoxy | 3.0.29-r0 |
| Alpine 3.23 | privoxy | 3.0.29-r0 |
| Alpine 3.24 | privoxy | 3.0.29-r0 |
| Debian 12 | privoxy | 3.0.29-1 |
| Debian 13 | privoxy | 3.0.29-1 |
| Debian 14 | privoxy | 3.0.29-1 |
| Debian 9 | privoxy | 3.0.26-3+deb9u1 |
| Ubuntu 16.04 LTS | privoxy | 3.0.24-1ubuntu0.1 |
| Ubuntu 18.04 LTS | privoxy | 3.0.26-5ubuntu0.1 |
| Ubuntu 20.04 LTS | privoxy | 3.0.28-2ubuntu0.1 |
| Ubuntu Pro 14.04 LTS | privoxy | 3.0.21-7+deb8u1ubuntu0.1~esm1 |