High severity7.5NVD Advisory· Published Dec 23, 2021· Updated Jun 17, 2026

CVE-2021-44540

Description

A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing.

Privoxy/Privoxy3 versions
cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*range: <3.0.33
- (no CPE)
- (no CPE)range: Privoxy 3.0.33
osv-coords6 versions
pkg:rpm/opensuse/privoxy&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/privoxy&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/privoxy&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/privoxy&distro=openSUSE%20Tumbleweed pkg:rpm/suse/privoxy&distro=SUSE%20Package%20Hub%2015%20SP3 pkg:rpm/suse/privoxy&distro=SUSE%20Package%20Hub%2015%20SP4
< 3.0.33-bp153.2.3.1+ 5 more
- (no CPE)range: < 3.0.33-bp153.2.3.1
- (no CPE)range: < 3.0.33-bp153.2.3.1
- (no CPE)range: < 3.0.33-bp154.3.3.1
- (no CPE)range: < 3.0.33-1.1
- (no CPE)range: < 3.0.33-bp153.2.3.1
- (no CPE)range: < 3.0.33-bp154.3.3.1