Vulnerabilities > CVE-2021-44541 - Memory Leak vulnerability in Privoxy

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

privoxy

CWE-401

NVD

Published: 2021-12-23

Updated: 2023-11-07

Summary

A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request destination.

Vulnerable Configurations

Part	Description	Count
Application	Privoxy Privoxy Privoxy 2.9.20 Privoxy Privoxy 3.0.0 Privoxy Privoxy 3.0.2 Privoxy Privoxy 3.0.3 Privoxy Privoxy 3.0.5 Privoxy Privoxy 3.0.6 Privoxy Privoxy 3.0.7 Privoxy Privoxy 3.0.8 Privoxy Privoxy 3.0.9 Privoxy Privoxy 3.0.10 Privoxy Privoxy 3.0.11 Privoxy Privoxy 3.0.12 Privoxy Privoxy 3.0.13 Privoxy Privoxy 3.0.14 Privoxy Privoxy 3.0.15 Privoxy Privoxy 3.0.16 Privoxy Privoxy 3.0.17 Privoxy Privoxy 3.0.18 Privoxy Privoxy 3.0.19 Privoxy Privoxy 3.0.20 Privoxy Privoxy 3.0.21 Privoxy Privoxy 3.0.22 Privoxy Privoxy 3.0.23 Privoxy Privoxy 3.0.24 Privoxy Privoxy 3.0.25 Privoxy Privoxy 3.0.26 Privoxy Privoxy 3.0.28 Privoxy Privoxy 3.0.28-2.1 Privoxy Privoxy 3.0.28-Lp151.1.1 Privoxy Privoxy 3.0.29 Privoxy Privoxy 3.0.32	31

Common Weakness Enumeration (CWE)

CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References