CVE-2021-44540

Name
CVE-2021-44540
Description
A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing.
NVD Severity
medium
Other trackers
Mailing lists
Exploits
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://www.privoxy.org/3.0.33/user-manual/whatsnew.html,
MISC https://www.privoxy.org/gitweb/?p=privoxy.git;a=commit;h=652b4b7cb0

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:* privoxy >= None < 3.0.33

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
privoxy edge-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
privoxy edge-main 3.0.32-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
privoxy edge-main 3.0.31-r0 None possibly vulnerable
privoxy edge-main 3.0.29-r0 None possibly vulnerable
privoxy 3.22-main 3.0.33-r0 None fixed
privoxy 3.22-main 3.0.32-r0 None possibly vulnerable
privoxy 3.22-main 3.0.31-r0 None possibly vulnerable
privoxy 3.22-main 3.0.29-r0 None possibly vulnerable
privoxy 3.21-main 3.0.33-r0 None fixed
privoxy 3.21-main 3.0.32-r0 None possibly vulnerable
privoxy 3.21-main 3.0.31-r0 None possibly vulnerable
privoxy 3.21-main 3.0.29-r0 None possibly vulnerable
privoxy 3.20-main 3.0.33-r0 None fixed
privoxy 3.20-main 3.0.32-r0 None possibly vulnerable
privoxy 3.20-main 3.0.31-r0 None possibly vulnerable
privoxy 3.20-main 3.0.29-r0 None possibly vulnerable
privoxy 3.19-main 3.0.33-r0 None fixed
privoxy 3.19-main 3.0.32-r0 None possibly vulnerable
privoxy 3.19-main 3.0.31-r0 None possibly vulnerable
privoxy 3.19-main 3.0.29-r0 None possibly vulnerable
privoxy 3.18-main 3.0.33-r0 None fixed
privoxy 3.17-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
privoxy 3.12-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed