CVE-2021-44542

A memory leak vulnerability was found in Privoxy when handling errors...

CVE-2021-44542

A memory leak vulnerability was found in Privoxy when handling errors...

CVE-2021-44541

CVE-2021-44541 affects Privoxy; the issue was fixed in Privoxy 3.0.33 in process_encrypted_request_headers() by freeing header memory when failing to determine the request destination. CVSSv3.1 base score 7.5 (HIGH) with NETWORK access and no user interaction. Remediation: upgrade to Privoxy 3.0....

CVE-2021-44540

CVE-2021-44540 affects Privoxy. The connected documents state a fix was implemented in get_url_spec_param() by freeing memory of the compiled pattern spec before bailing. No explicit root-cause or exploitation details are provided beyond this memory-management fix. No patch version or vendor-spec...

CVE-2021-44540

A vulnerability was found in Privoxy which was fixed in geturlspecparam by freeing memory of compiled pattern spec before bailing...

CVE-2021-44541

A vulnerability was found in Privoxy which was fixed in processencryptedrequestheaders by freeing header memory when failing to get the request destination...

CVE-2021-44540

A vulnerability was found in Privoxy which was fixed in geturlspecparam by freeing memory of compiled pattern spec before bailing...

CVE-2021-44541

A vulnerability was found in Privoxy which was fixed in processencryptedrequestheaders by freeing header memory when failing to get the request destination...

CVE-2021-44541

A vulnerability was found in Privoxy which was fixed in processencryptedrequestheaders by freeing header memory when failing to get the request destination...

CVE-2021-44540

A vulnerability was found in Privoxy which was fixed in geturlspecparam by freeing memory of compiled pattern spec before bailing...

MGASA-2021-0570 Updated privoxy packages fix security vulnerabilities

Updated privoxy packages fix security vulnerabilities: A security issue has been found in Privoxy before version 3.0.33. geturlspecparam did not free memory of compiled pattern spec before bailing CVE-2021-44540. A security issue has been found in Privoxy before version 3.0.33...

Updated privoxy packages fix security vulnerabilities

Updated privoxy packages fix security vulnerabilities: A security issue has been found in Privoxy before version 3.0.33. geturlspecparam did not free memory of compiled pattern spec before bailing CVE-2021-44540. A security issue has been found in Privoxy before version 3.0.33...

PT-2021-24128 · Privoxy +2 · Privoxy +2

Name of the Vulnerable Software and Affected Versions: Privoxy affected versions not specified Description: A vulnerability was found in Privoxy, which was fixed by freeing header memory when failing to get the request destination in the process encrypted request headers function. Recommendations...

PT-2021-24129 · Privoxy +2 · Privoxy +2

Name of the Vulnerable Software and Affected Versions: Privoxy affected versions not specified Description: A memory leak issue was discovered in Privoxy when handling errors. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

FreeBSD : Privoxy -- Multiple vulnerabilities (memory leak, XSS) (897e1962-5d5a-11ec-a3ed-040e3c3cf7e7)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 897e1962-5d5a-11ec-a3ed-040e3c3cf7e7 advisory. - An XSS vulnerability was found in Privoxy which was fixed in cgierrornotemplate by encode th...

Privoxy Input Validation Error Vulnerability (CNVD-2022-08930)

Privoxy is a proxy server from the American Privoxy team that does not cache web pages and comes with filtering. It has advanced filtering features to enhance privacy, modify web data and HTTP headers, control access and remove ads and other annoying Internet junk. privoxy has flexible...

[SECURITY] [DLA 2844-1] privoxy security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2844-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 13, 2021 https://wiki.debian.org/LTS -...

PT-2021-24127 · Privoxy +4 · Privoxy +4

Name of the Vulnerable Software and Affected Versions: Privoxy affected versions not specified Description: A vulnerability was found in Privoxy, which was fixed by freeing the memory of the compiled pattern spec before bailing in the get url spec param function. Recommendations: At the moment,...

PT-2021-24130 · Privoxy +4 · Privoxy +4

Name of the Vulnerable Software and Affected Versions: Privoxy affected versions not specified Description: A cross-site scripting XSS issue was discovered in Privoxy. The problem was addressed by encoding the template name in the cgi error no template function when Privoxy is set to serve the us...

Debian DLA-2844-1 : privoxy - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2844 advisory. - An XSS vulnerability was found in Privoxy which was fixed in cgierrornotemplate by encode the template name when Privoxy is configured to servce the user-manual...