CVE-2021-20217

EPSS 0.45%
Published 25.03.2021 19:15:13
Last modified 21.11.2024 05:46:09
Source secalert@redhat.com
Teams watchlist Login
Open Login

A flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a crafted CGI request may lead to denial of service. The highest threat from this vulnerability is to system availability.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Privoxy ≫ Privoxy Version < 3.0.31

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.45%	0.628

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

CWE-617 Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

https://security.gentoo.org/glsa/202107-16

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1923252

Third Party Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2021-20217

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-20217

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-20217

EUVD