CVE-2021-44541

Name
CVE-2021-44541
Description
A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request destination.
NVD Severity
medium
Other trackers
Mailing lists
Exploits
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://www.privoxy.org/3.0.33/user-manual/whatsnew.html,
MISC https://www.privoxy.org/gitweb/?p=privoxy.git;a=commit;h=652b4b7cb0

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:* privoxy >= None < 3.0.33

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
privoxy edge-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
privoxy 3.15-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
privoxy 3.14-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
privoxy 3.13-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
privoxy 3.12-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
privoxy 3.16-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
privoxy 3.17-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed