CVE catalog

CVE-2021-44273

e2guardian affected and fixed versions

[CVE catalog]

e2guardian v5.4.x <= v5.4.3r is affected by missing SSL certificate validation in the SSL MITM engine. In standalone mode (i.e., acting as a proxy or a transparent proxy), with SSL MITM enabled, e2guardian, if built with OpenSSL v1.1.x, did not validate hostnames in certificates of the web servers that it connected to, and thus was itself vulnerable to MITM attacks.

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.00% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixiee2guardian5.3.5-3FixedDistribution-reported fixed boundary[CVE-2021-44273]
Debiantrixiee2guardian5.5.8-1Fixed[CVE-2021-44273]
Debianside2guardian5.3.5-3FixedDistribution-reported fixed boundary[CVE-2021-44273]
Debianside2guardian5.5.9-2Fixed[CVE-2021-44273]
Debianforkye2guardian5.3.5-3FixedDistribution-reported fixed boundary[CVE-2021-44273]
Debianforkye2guardian5.5.9-2Fixed[CVE-2021-44273]
Debianbookworme2guardian5.3.5-3FixedDistribution-reported fixed boundary[CVE-2021-44273]
Debianbookworme2guardian5.3.5-4+deb12u1Fixed[CVE-2021-44273]
Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Debianbookworme2guardian5.3.5-3FixedDistribution-reported fixed boundary[CVE-2021-44273]
Debianbookworme2guardian5.3.5-4+deb12u1Fixed[CVE-2021-44273]
Debianforkye2guardian5.3.5-3FixedDistribution-reported fixed boundary[CVE-2021-44273]
Debianforkye2guardian5.5.9-2Fixed[CVE-2021-44273]
Debianside2guardian5.3.5-3FixedDistribution-reported fixed boundary[CVE-2021-44273]
Debianside2guardian5.5.9-2Fixed[CVE-2021-44273]
Debiantrixiee2guardian5.3.5-3FixedDistribution-reported fixed boundary[CVE-2021-44273]
Debiantrixiee2guardian5.5.8-1Fixed[CVE-2021-44273]
Original provider fields
{
  "package_releases": [
    {
      "name": "e2guardian",
      "status": "fixed",
      "release": "sid",
      "version": "5.5.9-2"
    },
    {
      "name": "e2guardian",
      "status": "fixed",
      "release": "forky",
      "version": "5.5.9-2"
    },
    {
      "name": "e2guardian",
      "status": "fixed",
      "release": "trixie",
      "version": "5.5.8-1"
    },
    {
      "name": "e2guardian",
      "status": "fixed",
      "release": "bookworm",
      "version": "5.3.5-4+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1003125,
      "name": "e2guardian",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "5.3.5-3"
    },
    {
      "bug": 1003125,
      "name": "e2guardian",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "5.3.5-3"
    },
    {
      "bug": 1003125,
      "name": "e2guardian",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "5.3.5-3"
    },
    {
      "bug": 1003125,
      "name": "e2guardian",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "5.3.5-3"
    }
  ],
  "distribution_packages": []
}

[Debian bug #1003125]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [e2guardian]Unknown
    Details (2)

    • 5.3.5-4+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 5.3.5-3

      dsa · e2guardian · debian · bookworm; dsa · e2guardian · debian · 12

    • 5.3.5-4+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 5.3.5-3

      dsa · e2guardian · debian · bookworm; dsa · e2guardian · debian · 12

[Debian 13 (Trixie)]

  • [e2guardian]Unknown
    Details (2)

    • 5.5.8-1 · amd64 · trixie

      Fixed · Fixed: 5.3.5-3

      dsa · e2guardian · debian · 13

    • 5.5.8-1 · arm64 · trixie

      Fixed · Fixed: 5.3.5-3

      dsa · e2guardian · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]