CVE-2022-30780

Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connection_read_...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connection_read_header_more in connections.c has a typo that disrupts use of multiple read operations on large headers.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2022-30780 lighttpd Corrigé dans: 1.4.59-1

Références

advisory github.com
advisory nvd.nist.gov
package github.com
package github.com
web podalirius.net
web redmine.lighttpd.net