lighttpd lighttpd vulnerabilities and exploits

(subscribe to this query)

lighttpd 1.4.18, and possibly other versions prior to 1.5.0, does not properly calculate the size of a file descriptor array, which allows remote malicious users to cause a denial of service (crash) via a large number of connections, which triggers an out-of-bounds access.

Lighttpd Lighttpd 1.4.18 Lighttpd Lighttpd 1.4.8 Lighttpd Lighttpd 1.4.17 Lighttpd Lighttpd 1.4.11 Lighttpd Lighttpd 1.4.14 Lighttpd Lighttpd 1.4.10 Lighttpd Lighttpd 1.4.16 Lighttpd Lighttpd 1.4.12 Lighttpd Lighttpd 1.4.9 Lighttpd Lighttpd 1.4.7 Lighttpd Lighttpd 1.4.15 Lighttpd Lighttpd 1.4.13

Lighttpd 1.4.56 up to and including 1.4.58 allows a remote malicious user to cause a denial of service (CPU consumption from stuck connections) because connection_read_header_more in connections.c has a typo that disrupts use of multiple read operations on large headers.

Lighttpd Lighttpd 1.4.57 Lighttpd Lighttpd 1.4.58 Lighttpd Lighttpd 1.4.56

2 Github repositories

The http_request_split_value function in request.c in lighttpd prior to 1.4.32 allows remote malicious users to cause a denial of service (infinite loop) via a request with a header containing an empty token, as demonstrated using the "Connection: TE,,Keep-Alive" header...

Lighttpd Lighttpd 1.4.32 Lighttpd Lighttpd 1.4.31

1 EDB exploit

lighttpd 1.4.12 and 1.4.13 allows remote malicious users to cause a denial of service (cpu and resource consumption) by disconnecting while lighttpd is parsing CRLF sequences, which triggers an infinite loop and file descriptor consumption.

Lighttpd Lighttpd 1.4.12 Lighttpd Lighttpd 1.4.13

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook