Memory Management Issue in Privoxy Web Proxy
CVE-2021-44540

7.5HIGH

Key Information:

Vendor

Privoxy

Status
Privoxy
Vendor
CVE Published:
23 December 2021

What is CVE-2021-44540?

A memory management vulnerability has been identified in the Privoxy web proxy. This issue arises within the get_url_spec_param() function, where the compiled pattern specification's memory is not properly freed before the function exits. Such mismanagement could potentially lead to memory leaks, affecting the overall performance and security of the Privoxy proxy server and its operations.

Affected Version(s)

Privoxy Privoxy 3.0.33

References

https://www.privoxy.org/3.0.33/user-manual/whatsnew.html%2C
x_refsource_MISC
https://www.privoxy.org/gitweb/?p=privoxy.git%3Ba=commit%...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.