Vulnerabilities > CVE-2021-20217 - Reachable Assertion vulnerability in Privoxy

CVSS 7.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

network

low complexity

privoxy

CWE-617

NVD

Published: 2021-03-25

Updated: 2021-12-14

Summary

A flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a crafted CGI request may lead to denial of service. The highest threat from this vulnerability is to system availability.

Vulnerable Configurations

Part	Description	Count
Application	Privoxy Privoxy Privoxy 2.9.20 Privoxy Privoxy 3.0.0 Privoxy Privoxy 3.0.2 Privoxy Privoxy 3.0.3 Privoxy Privoxy 3.0.5 Privoxy Privoxy 3.0.6 Privoxy Privoxy 3.0.7 Privoxy Privoxy 3.0.8 Privoxy Privoxy 3.0.9 Privoxy Privoxy 3.0.10 Privoxy Privoxy 3.0.11 Privoxy Privoxy 3.0.12 Privoxy Privoxy 3.0.13 Privoxy Privoxy 3.0.14 Privoxy Privoxy 3.0.15 Privoxy Privoxy 3.0.16 Privoxy Privoxy 3.0.17 Privoxy Privoxy 3.0.18 Privoxy Privoxy 3.0.19 Privoxy Privoxy 3.0.20 Privoxy Privoxy 3.0.21 Privoxy Privoxy 3.0.22 Privoxy Privoxy 3.0.23 Privoxy Privoxy 3.0.24 Privoxy Privoxy 3.0.25 Privoxy Privoxy 3.0.26 Privoxy Privoxy 3.0.28 Privoxy Privoxy 3.0.28-2.1 Privoxy Privoxy 3.0.28-Lp151.1.1 Privoxy Privoxy 3.0.29	30

Common Weakness Enumeration (CWE)

CWE-617 - Reachable Assertion

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References