ALT-PU-2021-1116-1
Closed vulnerabilities
BDU:2021-04648
Уязвимость функционала show-status обработчика CGI прокси HTTP Privoxy, связанная с неправильным освобождением памяти перед удалением последний ссылки, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2020-35502
A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running out of memory can lead to a system crash.
Modified: 2024-11-21
CVE-2021-20209
A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured.
- https://bugzilla.redhat.com/show_bug.cgi?id=1928726
- https://bugzilla.redhat.com/show_bug.cgi?id=1928726
- GLSA-202107-16
- GLSA-202107-16
- https://www.privoxy.org/3.0.29/user-manual/whatsnew.html
- https://www.privoxy.org/3.0.29/user-manual/whatsnew.html
- https://www.privoxy.org/gitweb/?p=privoxy.git%3Ba=commit%3Bh=c62254a686
- https://www.privoxy.org/gitweb/?p=privoxy.git%3Ba=commit%3Bh=c62254a686
Modified: 2024-11-21
CVE-2021-20210
A flaw was found in Privoxy in versions before 3.0.29. Memory leak in the show-status CGI handler when no filter files are configured can lead to a system crash.
Modified: 2024-11-21
CVE-2021-20211
A flaw was found in Privoxy in versions before 3.0.29. Memory leak when client tags are active can cause a system crash.
Modified: 2024-11-21
CVE-2021-20212
A flaw was found in Privoxy in versions before 3.0.29. Memory leak if multiple filters are executed and the last one is skipped due to a pcre error leading to a system crash.
Modified: 2024-11-21
CVE-2021-20213
A flaw was found in Privoxy in versions before 3.0.29. Dereference of a NULL-pointer that could result in a crash if accept-intercepted-requests was enabled, Privoxy failed to get the request destination from the Host header and a memory allocation failed.
Modified: 2024-11-21
CVE-2021-20214
A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the client-tags CGI handler when client tags are configured and memory allocations fail can lead to a system crash.
Modified: 2024-11-21
CVE-2021-20215
A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the show-status CGI handler when memory allocations fail can lead to a system crash.