8 matches found
SUSE CVE-2021-44541
A vulnerability was found in Privoxy which was fixed in processencryptedrequestheaders by freeing header memory when failing to get the request destination...
openSUSE: Security Advisory for privoxy (openSUSE-SU-2021:1646-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE 15 Security Update : privoxy (openSUSE-SU-2021:1646-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1646-1 advisory. - A vulnerability was found in Privoxy which was fixed in geturlspecparam by freeing memory of compiled pattern spec before bailing...
CVE-2021-44541
CVE-2021-44541 affects Privoxy; the issue was fixed in Privoxy 3.0.33 in process_encrypted_request_headers() by freeing header memory when failing to determine the request destination. CVSSv3.1 base score 7.5 (HIGH) with NETWORK access and no user interaction. Remediation: upgrade to Privoxy 3.0....
Updated privoxy packages fix security vulnerabilities
Updated privoxy packages fix security vulnerabilities: A security issue has been found in Privoxy before version 3.0.33. geturlspecparam did not free memory of compiled pattern spec before bailing CVE-2021-44540. A security issue has been found in Privoxy before version 3.0.33...
MGASA-2021-0570 Updated privoxy packages fix security vulnerabilities
Updated privoxy packages fix security vulnerabilities: A security issue has been found in Privoxy before version 3.0.33. geturlspecparam did not free memory of compiled pattern spec before bailing CVE-2021-44540. A security issue has been found in Privoxy before version 3.0.33...
FreeBSD : Privoxy -- Multiple vulnerabilities (memory leak, XSS) (897e1962-5d5a-11ec-a3ed-040e3c3cf7e7)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 897e1962-5d5a-11ec-a3ed-040e3c3cf7e7 advisory. - An XSS vulnerability was found in Privoxy which was fixed in cgierrornotemplate by encode th...
Privoxy -- Multiple vulnerabilities (memory leak, XSS)
Privoxy reports: cgierrornotemplate: Encode the template name to prevent XSS cross-site scripting when Privoxy is configured to servce the user-manual itself. Commit 0e668e9409c. OVE-20211102-0001. CVE-2021-44543. Reported by: Artem Ivanov geturlspecparam: Free memory of compiled pattern spec...