Поиск уязвимостей
Количество 16
Количество 16
ALT-PU-2022-2649
ALT-PU-2022-2649: package `lighttpd` update to version 1.4.67-alt1
CVE-2022-37797
In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.
CVE-2022-37797
In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.
CVE-2022-37797
In lighttpd 1.4.65, mod_wstunnel does not initialize a handler functio ...
CVE-2022-41556
A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a large amount of anomalous TCP behavior by clients. It is related to RDHUP mishandling in certain HTTP/1.1 chunked situations. Use of mod_fastcgi is, for example, affected. This is fixed in 1.4.67.
CVE-2022-41556
A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a large amount of anomalous TCP behavior by clients. It is related to RDHUP mishandling in certain HTTP/1.1 chunked situations. Use of mod_fastcgi is, for example, affected. This is fixed in 1.4.67.
CVE-2022-41556
A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 coul ...
openSUSE-SU-2022:10132-1
Security update for lighttpd
GHSA-cm5p-p299-9f4g
In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.
BDU:2022-06126
Уязвимость модуля mod_wstunnel веб-сервера lighttpd, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2022:10140-1
Security update for lighttpd
GHSA-jm88-vr5q-23rj
A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a large amount of anomalous TCP behavior by clients. It is related to RDHUP mishandling in certain HTTP/1.1 chunked situations. Use of mod_fastcgi is, for example, affected. This is fixed in 1.4.67.
BDU:2022-06197
Уязвимость модулей mod_fastcgi и mod_scgi веб-сервера lighttpd, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20221004-02
Уязвимость lighttpd
ROS-20221007-02
Уязвимость lighttpd
ALT-PU-2022-2735
ALT-PU-2022-2735: package `lighttpd` update to version 1.4.67-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2022-2649 ALT-PU-2022-2649: package `lighttpd` update to version 1.4.67-alt1 | CVSS3: 7.5 | около 4 лет назад | |
 | CVE-2022-37797 In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition. | CVSS3: 7.5 | 3% Низкий | около 4 лет назад |
 | CVE-2022-37797 In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition. | CVSS3: 7.5 | 3% Низкий | около 4 лет назад |
| CVE-2022-37797 In lighttpd 1.4.65, mod_wstunnel does not initialize a handler functio ... | CVSS3: 7.5 | 3% Низкий | около 4 лет назад |
| CVE-2022-41556 A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a large amount of anomalous TCP behavior by clients. It is related to RDHUP mishandling in certain HTTP/1.1 chunked situations. Use of mod_fastcgi is, for example, affected. This is fixed in 1.4.67. | CVSS3: 7.5 | 4% Низкий | около 4 лет назад |
| CVE-2022-41556 A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a large amount of anomalous TCP behavior by clients. It is related to RDHUP mishandling in certain HTTP/1.1 chunked situations. Use of mod_fastcgi is, for example, affected. This is fixed in 1.4.67. | CVSS3: 7.5 | 4% Низкий | около 4 лет назад |
| CVE-2022-41556 A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 coul ... | CVSS3: 7.5 | 4% Низкий | около 4 лет назад |
 | openSUSE-SU-2022:10132-1 Security update for lighttpd | 3% Низкий | около 4 лет назад | |
| GHSA-cm5p-p299-9f4g In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition. | CVSS3: 7.5 | 3% Низкий | около 4 лет назад |
 | BDU:2022-06126 Уязвимость модуля mod_wstunnel веб-сервера lighttpd, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 3% Низкий | больше 4 лет назад |
| openSUSE-SU-2022:10140-1 Security update for lighttpd | 4% Низкий | около 4 лет назад | |
| GHSA-jm88-vr5q-23rj A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a large amount of anomalous TCP behavior by clients. It is related to RDHUP mishandling in certain HTTP/1.1 chunked situations. Use of mod_fastcgi is, for example, affected. This is fixed in 1.4.67. | CVSS3: 7.5 | 4% Низкий | около 4 лет назад |
| BDU:2022-06197 Уязвимость модулей mod_fastcgi и mod_scgi веб-сервера lighttpd, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 4% Низкий | около 4 лет назад |
 | ROS-20221004-02 Уязвимость lighttpd | 3% Низкий | около 4 лет назад | |
| ROS-20221007-02 Уязвимость lighttpd | 4% Низкий | около 4 лет назад | |
| ALT-PU-2022-2735 ALT-PU-2022-2735: package `lighttpd` update to version 1.4.67-alt1 | CVSS3: 7.5 | 4% Низкий | около 4 лет назад |
Уязвимостей на страницу