Name of the Vulnerable Software and Affected Versions privoxy version 3.0.21

Description A memory leak occurred in privoxy when rejecting client connections due to the socket limit being reached, specifically in versions compiled with IPv6 support. Additionally, a use-after-free bug and two potential use-after-free issues were found. A file descriptor leak was also detected in an error path in jbsockets.c.

Recommendations For privoxy version 3.0.21, update to a newer version that includes the fixes for the mentioned security issues. As a temporary workaround, consider restricting the number of client connections to prevent the socket limit from being reached, which may help mitigate the memory leak issue.