Browse CVEs

HIGH 7.5 CVE-2021-44542 A memory leak vulnerability was found in Privoxy when handling errors. Privoxy 3.0.33+ Fix from $1,9502021-12-23 MEDIUM 6.1 CVE-2021-44543 An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured to servce… Privoxy 3.0.33+ Fix from $1,6002021-12-23 HIGH 7.5 CVE-2021-44540 A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing. Privoxy 3.0.33+ Fix from $1,9502021-12-23 HIGH 7.5 CVE-2021-44541 A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request … Privoxy 3.0.33+ Fix from $1,9502021-12-23 HIGH 7.5 CVE-2021-20209 A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured. Privoxy 3.0.29+ Fix from $1,9502021-05-25 HIGH 7.5 CVE-2021-20214 A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the client-tags CGI handler when client tags are configured and memory allocat… Privoxy 3.0.29+ Fix from $1,9502021-03-25 HIGH 7.5 CVE-2021-20215 A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the show-status CGI handler when memory allocations fail can lead to a system … Privoxy 3.0.29+ Fix from $1,9502021-03-25 HIGH 7.5 CVE-2021-20216 A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of servic… Privoxy 3.0.31+ Fix from $1,9502021-03-25 HIGH 7.5 CVE-2021-20217 A flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a crafted CGI request may lead to denial of service. The hig… Privoxy 3.0.31+ Fix from $1,9502021-03-25 HIGH 7.5 CVE-2020-35502 A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running… Privoxy 3.0.29+ Fix from $1,9502021-03-25 HIGH 7.5 CVE-2021-20210 A flaw was found in Privoxy in versions before 3.0.29. Memory leak in the show-status CGI handler when no filter files are configured can lead to a s… Privoxy 3.0.29+ Fix from $1,9502021-03-25 HIGH 7.5 CVE-2021-20211 A flaw was found in Privoxy in versions before 3.0.29. Memory leak when client tags are active can cause a system crash. Privoxy 3.0.29+ Fix from $1,9502021-03-25 HIGH 7.5 CVE-2021-20212 A flaw was found in Privoxy in versions before 3.0.29. Memory leak if multiple filters are executed and the last one is skipped due to a pcre error l… Privoxy 3.0.29+ Fix from $1,9502021-03-25 HIGH 7.5 CVE-2021-20213 A flaw was found in Privoxy in versions before 3.0.29. Dereference of a NULL-pointer that could result in a crash if accept-intercepted-requests was … Privoxy 3.0.29+ Fix from $1,9502021-03-25 HIGH 7.5 CVE-2021-20274 A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server misbehaves. Privoxy 3.0.32+ Fix from $1,9502021-03-09 HIGH 7.8 CVE-2019-3699 UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate fr… Privoxy 3.0.28-lp151.1.1 / 3.0.28-2.1+ Fix from $1,9502020-01-24 HIGH 7.5 CVE-2016-1983 The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via an e… Privoxy after 3.0.23 Fix from $1,9502016-01-27 HIGH 7.5 CVE-2016-1982 The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read … Privoxy after 3.0.23 Fix from $1,9502016-01-27 HIGH 7.5 CVE-2015-1031 Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via vectors related to (1) the unm… Privoxy after 3.0.21 Fix from $1,9502015-02-10 MEDIUM 5.0 CVE-2015-1380 jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded body. Privoxy after 3.0.22 Fix from $1,6002015-02-03 MEDIUM 5.0 CVE-2015-1201 Privoxy before 3.0.22 allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors. NOTE: the provenan… Privoxy after 3.0.21 Fix from $1,6002015-01-20 MEDIUM 5.0 CVE-2015-1030 Memory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service (memory co… Privoxy after 3.0.21 Fix from $1,6002015-01-20 MEDIUM 5.8 CVE-2013-2503 Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it ea… Privoxy after 3.0.20 Fix from $1,6002013-03-11