Количество 7
Количество 7
GHSA-cm5p-p299-9f4g
In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.
CVE-2022-37797
In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.
CVE-2022-37797
In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.
CVE-2022-37797
In lighttpd 1.4.65, mod_wstunnel does not initialize a handler functio ...
openSUSE-SU-2022:10132-1
Security update for lighttpd
BDU:2022-06126
Уязвимость модуля mod_wstunnel веб-сервера lighttpd, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20221004-02
Уязвимость lighttpd
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-cm5p-p299-9f4g In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition. | CVSS3: 7.5 | 0% Низкий | больше 3 лет назад |
 | CVE-2022-37797 In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition. | CVSS3: 7.5 | 0% Низкий | больше 3 лет назад |
 | CVE-2022-37797 In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition. | CVSS3: 7.5 | 0% Низкий | больше 3 лет назад |
| CVE-2022-37797 In lighttpd 1.4.65, mod_wstunnel does not initialize a handler functio ... | CVSS3: 7.5 | 0% Низкий | больше 3 лет назад |
 | openSUSE-SU-2022:10132-1 Security update for lighttpd | 0% Низкий | больше 3 лет назад | |
 | BDU:2022-06126 Уязвимость модуля mod_wstunnel веб-сервера lighttpd, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | больше 3 лет назад |
 | ROS-20221004-02 Уязвимость lighttpd | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу