Поиск уязвимостей
Количество 8
Количество 8
BDU:2022-06126
Уязвимость модуля mod_wstunnel веб-сервера lighttpd, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20221004-02
Уязвимость lighttpd
ALT-PU-2022-2649
ALT-PU-2022-2649: package `lighttpd` update to version 1.4.67-alt1
CVE-2022-37797
In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.
CVE-2022-37797
In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.
CVE-2022-37797
In lighttpd 1.4.65, mod_wstunnel does not initialize a handler functio ...
openSUSE-SU-2022:10132-1
Security update for lighttpd
GHSA-cm5p-p299-9f4g
In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-06126 Уязвимость модуля mod_wstunnel веб-сервера lighttpd, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 3% Низкий | больше 4 лет назад |
 | ROS-20221004-02 Уязвимость lighttpd | 3% Низкий | около 4 лет назад | |
| ALT-PU-2022-2649 ALT-PU-2022-2649: package `lighttpd` update to version 1.4.67-alt1 | CVSS3: 7.5 | около 4 лет назад | |
 | CVE-2022-37797 In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition. | CVSS3: 7.5 | 3% Низкий | около 4 лет назад |
 | CVE-2022-37797 In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition. | CVSS3: 7.5 | 3% Низкий | около 4 лет назад |
| CVE-2022-37797 In lighttpd 1.4.65, mod_wstunnel does not initialize a handler functio ... | CVSS3: 7.5 | 3% Низкий | около 4 лет назад |
 | openSUSE-SU-2022:10132-1 Security update for lighttpd | 3% Низкий | около 4 лет назад | |
| GHSA-cm5p-p299-9f4g In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition. | CVSS3: 7.5 | 3% Низкий | около 4 лет назад |
Уязвимостей на страницу