privoxy vulnerabilities and fixes

Recent CVEs affecting privoxy, with upgrade or downgrade steps. 19 tracked.

privoxy has 19 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 19. Most recent: 2021-12-23. Highest priority: CVE-2021-20272 (score 57/100).

• CVE-2021-44543 MEDIUM 6.1 UPGRADE An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template na
• CVE-2021-44542 HIGH 7.5 UPGRADE A memory leak vulnerability was found in Privoxy when handling errors.
• CVE-2021-44541 HIGH 7.5 UPGRADE A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header
• CVE-2021-44540 HIGH 7.5 UPGRADE A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pat
• CVE-2021-20276 HIGH 7.5 UPGRADE MITIGATE A flaw was found in privoxy before 3.0.32
• CVE-2021-20275 HIGH 7.5 UPGRADE MITIGATE A flaw was found in privoxy before 3.0.32
• CVE-2021-20274 HIGH 7.5 UPGRADE A flaw was found in privoxy before 3.0.32
• CVE-2021-20273 HIGH 7.5 UPGRADE MITIGATE A flaw was found in privoxy before 3.0.32
• CVE-2021-20272 HIGH 7.5 UPGRADE MITIGATE A flaw was found in privoxy before 3.0.32
• CVE-2021-20217 HIGH 7.5 UPGRADE A flaw was found in Privoxy in versions before 3.0.31
• CVE-2021-20216 HIGH 7.5 UPGRADE A flaw was found in Privoxy in versions before 3.0.31
• CVE-2021-20215 HIGH 7.5 UPGRADE A flaw was found in Privoxy in versions before 3.0.29
• CVE-2021-20214 HIGH 7.5 UPGRADE A flaw was found in Privoxy in versions before 3.0.29
• CVE-2021-20213 HIGH 7.5 UPGRADE A flaw was found in Privoxy in versions before 3.0.29
• CVE-2021-20212 HIGH 7.5 UPGRADE A flaw was found in Privoxy in versions before 3.0.29
• CVE-2021-20211 HIGH 7.5 UPGRADE A flaw was found in Privoxy in versions before 3.0.29
• CVE-2021-20210 HIGH 7.5 UPGRADE A flaw was found in Privoxy in versions before 3.0.29
• CVE-2021-20209 HIGH 7.5 UPGRADE A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action f
• CVE-2020-35502 HIGH 7.5 UPGRADE A flaw was found in Privoxy in versions before 3.0.29

FAQ

How do I fix privoxy vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is privoxy being exploited right now?

None of the tracked privoxy CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which privoxy CVE should I patch first?

CVE-2021-20272 currently ranks highest (57/100): A flaw was found in privoxy before 3.0.32.

RSS feed for privoxy · ← Back to latest CVEs