CVE-2021-44542 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
redhat	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 20%

Vendor	Product	Version
privoxy	privoxy	𝑥 < 3.0.33

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

privoxy

bullseye	3.0.32-2+deb11u1 fixed
buster	not-affected
stretch	not-affected
bookworm	3.0.34-1 fixed
sid	3.0.34-6 fixed
trixie	3.0.34-6 fixed

Ubuntu Releases

Ubuntu Product

Codename

privoxy

jammy	not-affected
impish	ignored
hirsute	ignored
focal	not-affected
bionic	not-affected
xenial	not-affected
trusty	not-affected

Common Weakness Enumeration

CWE-401 - Missing Release of Memory after Effective Lifetime
The software does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References

https://www.privoxy.org/3.0.33/user-manual/whatsnew.html%2C

https://www.privoxy.org/gitweb/?p=privoxy.git%3Ba=commit%3Bh=c48d1d6d08

https://www.privoxy.org/3.0.33/user-manual/whatsnew.html%2C

https://www.privoxy.org/gitweb/?p=privoxy.git%3Ba=commit%3Bh=c48d1d6d08