ALPINE-CVE-2021-20274 PUBLISHED CVSS 7.5 HIGH

A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server misbehaves.

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.15privoxy3.0.24-r0, 3.0.24-r1, 3.0.24-r2
Alpine:v3.22privoxy3.0.29-r0, 3.0.31-r0, 3.0.30-r0
Alpine:v3.23privoxy3.0.24-r1, 3.0.19-r0, 3.0.18-r0
Alpine:v3.12privoxy0, 3.0.16-r0, 3.0.16-r1
Alpine:v3.21privoxy0, 3.0.16-r0, 3.0.16-r1
Alpine:v3.16privoxy0, 3.0.16-r0, 3.0.16-r1
Alpine:v3.14privoxy3.0.31-r0, 3.0.30-r0, 3.0.29-r0
Alpine:v3.19privoxy0, 3.0.16-r0, 3.0.16-r1
Alpine:v3.18privoxy0, 3.0.31-r0, 3.0.30-r0
Alpine:v3.20privoxy3.0.16-r0, 3.0.16-r1, 3.0.17-r0
Alpine:v3.17privoxy3.0.31-r0, 3.0.31-r0, 3.0.30-r0
Alpine:v3.13privoxy3.0.31-r0, 3.0.30-r0, 3.0.29-r0

Timeline

References

Open in Interactive Console →