High severity7.5NVD Advisory· Published Dec 23, 2021· Updated Jun 17, 2026

CVE-2021-44541

Description

A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request destination.

Affected products

Privoxy/Privoxy3 versions
cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*range: <3.0.33
- (no CPE)
- (no CPE)range: Privoxy 3.0.33
osv-coords6 versions
pkg:rpm/opensuse/privoxy&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/privoxy&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/privoxy&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/privoxy&distro=openSUSE%20Tumbleweed pkg:rpm/suse/privoxy&distro=SUSE%20Package%20Hub%2015%20SP3 pkg:rpm/suse/privoxy&distro=SUSE%20Package%20Hub%2015%20SP4
< 3.0.33-bp153.2.3.1+ 5 more
- (no CPE)range: < 3.0.33-bp153.2.3.1
- (no CPE)range: < 3.0.33-bp153.2.3.1
- (no CPE)range: < 3.0.33-bp154.3.3.1
- (no CPE)range: < 3.0.33-1.1
- (no CPE)range: < 3.0.33-bp153.2.3.1
- (no CPE)range: < 3.0.33-bp154.3.3.1

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2021-44541

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions