High severity7.5NVD Advisory· Published Mar 25, 2021· Updated Jun 17, 2026

CVE-2021-20216

Description

A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Privoxy/Privoxy3 versions
cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*range: <3.0.31
- (no CPE)range: <3.0.31
- (no CPE)range: privoxy 3.0.31
osv-coords3 versions
pkg:rpm/opensuse/privoxy&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/privoxy&distro=openSUSE%20Tumbleweed pkg:rpm/suse/privoxy&distro=SUSE%20Package%20Hub%2015%20SP2
< 3.0.31-lp152.3.6.1+ 2 more
- (no CPE)range: < 3.0.31-lp152.3.6.1
- (no CPE)range: < 3.0.32-2.3
- (no CPE)range: < 3.0.31-bp152.4.6.1

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
security.gentoo.org/glsa/202107-16nvdThird Party Advisory
www.openwall.com/lists/oss-security/2021/01/31/2nvdMailing ListRelease NotesThird Party Advisory
www.privoxy.org/3.0.31/user-manual/whatsnew.htmlnvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000