CVE-2021-21323

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-21323
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21323.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-21323
Aliases
  • GHSA-mqjf-9x5g-2rv6
Published
2021-02-23T23:15:13.317Z
Modified
2026-07-09T10:52:39.867906Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor windows to their DNS provider. (DNS requests that were not initiated by CNAME adblocking would go through Tor as expected.) This is fixed in Brave version 1.20.108

References

Affected packages

Git / github.com/brave/brave-browser

Affected ranges

Type
GIT
Repo
https://github.com/brave/brave-browser
Events
Introduced
30d15b9ce70daf1ca2cfc82f1bb84c0751946446
Last affected
97286d115bd0f86bf2f436bebee9a3f9c78ceff0
Database specific 
{
    "cpe": "cpe:2.3:a:brave:brave:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "1.17.73"
        },
        {
            "last_affected": "1.20.103"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21323.json"

Git / github.com/brave/brave-core

Affected ranges

Type
GIT
Repo
https://github.com/brave/brave-core
Events
Introduced
03d3a8fb995b4648ae741fee1ec7e2b0bd8c92cf
Last affected
94b0001f39980d01863d30c4c2bed19fa47a867e
Fixed
12fe321eaad8acc1cbd1d70b4128f687777bcf15
Database specific 
{
    "cpe": "cpe:2.3:a:brave:brave:*:*:*:*:*:*:*:*",
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "1.17.73"
        },
        {
            "last_affected": "1.20.103"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21323.json"