Debian Privoxy vulnerabilities

CVE-2016-1982 [HIGH] CVE-2016-1982: privoxy - The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.2... The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) via crafted chunk-encoded content. Scope: local bookworm: resolved (fixed in 3.0.24-1) bullseye: resolved (fixed in 3.0.24-1) forky: resolved (fixed in 3.0.24-1) sid: resolved (fixed in 3.0.24-1) trixie: resolv

CVE-2021-44542 [HIGH] CVE-2021-44542: privoxy - A memory leak vulnerability was found in Privoxy when handling errors. A memory leak vulnerability was found in Privoxy when handling errors. Scope: local bookworm: resolved (fixed in 3.0.33-1) bullseye: resolved (fixed in 3.0.32-2+deb11u1) forky: resolved (fixed in 3.0.33-1) sid: resolved (fixed in 3.0.33-1) trixie: resolved (fixed in 3.0.33-1)

CVE-2021-44543 [MEDIUM] CVE-2021-44543: privoxy - An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_templa... An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured to servce the user-manual itself. Scope: local bookworm: resolved (fixed in 3.0.33-1) bullseye: resolved (fixed in 3.0.32-2+deb11u1) forky: resolved (fixed in 3.0.33-1) sid: resolved (fixed in 3.0.33-1) trixie: resolved (fixed

CVE-2015-1380 [MEDIUM] CVE-2015-1380: privoxy - jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of serv... jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded body. Scope: local bookworm: resolved (fixed in 3.0.21-7) bullseye: resolved (fixed in 3.0.21-7) forky: resolved (fixed in 3.0.21-7) sid: resolved (fixed in 3.0.21-7) trixie: resolved (fixed in 3.0.21-7)

CVE-2015-1382 [MEDIUM] CVE-2015-1382: privoxy - parsers.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of ... parsers.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to an HTTP time header. Scope: local bookworm: resolved (fixed in 3.0.21-7) bullseye: resolved (fixed in 3.0.21-7) forky: resolved (fixed in 3.0.21-7) sid: resolved (fixed in 3.0.21-7) trixie: resolved (fixed in 3.0.21-7)

CVE-2015-1381 [MEDIUM] CVE-2015-1381: privoxy - Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow re... Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a denial of service (segmentation fault or memory consumption) via unspecified vectors. Scope: local bookworm: resolved (fixed in 3.0.21-7) bullseye: resolved (fixed in 3.0.21-7) forky: resolved (fixed in 3.0.21-7) sid: resolved (fixed in 3.0.21-7) trixie: resolve

CVE-2015-1030 [MEDIUM] CVE-2015-1030: privoxy - Memory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy before 3... Memory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of requests that are rejected because the socket limit is reached. Scope: local bookworm: resolved (fixed in 3.0.21-5) bullseye: resolved (fixed in 3.0.21-5) forky: resolved (fixed in 3.0.2