The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-6fe9346693 advisory.

  - A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails     unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system     availability. (CVE-2021-20216)

  - A flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a crafted CGI     request may lead to denial of service. The highest threat from this vulnerability is to system     availability. (CVE-2021-20217)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-f08e89a0d5 advisory.

  - A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails     unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system     availability. (CVE-2021-20216)

  - A flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a crafted CGI     request may lead to denial of service. The highest threat from this vulnerability is to system     availability. (CVE-2021-20217)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202107-16 (Privoxy: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in privoxy. Please review       the CVE identifiers referenced below for details.
  Impact :

    An attacker could cause a possible Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update for privoxy fixes the following issues :

  - Update to version 3.0.31 :

  - Security/Reliability (boo#1181650)

  - Prevent an assertion from getting triggered by a crafted     CGI request. Commit 5bba5b89193fa. OVE-20210130-0001.
    CVE-2021-20217 Reported by: Joshua Rogers (Opera)

  - Fixed a memory leak when decompression fails     'unexpectedly'. Commit f431d61740cc0. OVE-20210128-0001.
    CVE-2021-20216

  - Bug fixes :

  - Fixed detection of insufficient data for decompression.
    Previously Privoxy could try to decompress a partly     uninitialized buffer.

Multiple vulnerabilites were discovered in privoxy, a privacy enhancing HTTP proxy, like memory leaks, dereference of a NULL pointer, et al.

For Debian 9 stretch, these problems have been fixed in version 3.0.26-3+deb9u1.

We recommend that you upgrade your privoxy packages.

For the detailed security status of privoxy please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/privoxy

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 20.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4886-1 advisory.

  - A flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted CGI     request leading to server crash. (CVE-2021-20272)

  - A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is     toggled off. (CVE-2021-20273)

  - A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in     chunked_body_is_complete() leading to denial of service. (CVE-2021-20275)

  - A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to     pcre_compile() may lead to denial of service. (CVE-2021-20276)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
146368	Fedora 33 : privoxy (2021-6fe9346693)	Nessus	Fedora Local Security Checks	2/10/2021	4/12/2021	high
146358	Fedora 32 : privoxy (2021-f08e89a0d5)	Nessus	Fedora Local Security Checks	2/10/2021	4/12/2021	high
157017	GLSA-202107-16 : Privoxy: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	1/24/2022	1/16/2024	high
146317	openSUSE Security Update : privoxy (openSUSE-2021-265)	Nessus	SuSE Local Security Checks	2/9/2021	3/30/2021	high
146283	Debian DLA-2548-1 : privoxy security update	Nessus	Debian Local Security Checks	2/8/2021	6/1/2021	high
147971	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Privoxy vulnerabilities (USN-4886-1)	Nessus	Ubuntu Local Security Checks	3/23/2021	1/8/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high