Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cm5p-p299-9f4g

Опубликовано: 13 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.

In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.

EPSS

Процентиль: 57%
0.00356
Низкий

7.5 High

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 3 лет назад

In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.

CVSS3: 7.5
nvd
больше 3 лет назад

In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.

CVSS3: 7.5
debian
больше 3 лет назад

In lighttpd 1.4.65, mod_wstunnel does not initialize a handler functio ...

suse-cvrf
больше 3 лет назад

Security update for lighttpd

CVSS3: 7.5
fstec
больше 3 лет назад

Уязвимость модуля mod_wstunnel веб-сервера lighttpd, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 57%
0.00356
Низкий

7.5 High

CVSS3

Дефекты

CWE-476