Vulnerability Description
A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request destination.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Privoxy | Privoxy | < 3.0.33 |
Related Weaknesses (CWE)
References
- https://www.privoxy.org/3.0.33/user-manual/whatsnew.html%2C
- https://www.privoxy.org/gitweb/?p=privoxy.git%3Ba=commit%3Bh=652b4b7cb0
- https://www.privoxy.org/3.0.33/user-manual/whatsnew.html%2C
- https://www.privoxy.org/gitweb/?p=privoxy.git%3Ba=commit%3Bh=652b4b7cb0
FAQ
What is CVE-2021-44541?
CVE-2021-44541 is a vulnerability with a CVSS score of 7.5 (HIGH). A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request destination.
How severe is CVE-2021-44541?
CVE-2021-44541 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-44541?
Check the references section above for vendor advisories and patch information. Affected products include: Privoxy Privoxy.