CVE-2021-20213: Privoxy

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

A flaw was found in Privoxy in versions before 3.0.29. Dereference of a NULL-pointer that could result in a crash if accept-intercepted-requests was enabled, Privoxy failed to get the request destination from the Host header and a memory allocation failed.

Affected products

• Privoxy Privoxy: before 3.0.29 (fixed in 3.0.29)

Published 2021-03-25. Last modified 2026-06-17.