CVE-2008-1531
6.3 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.094 Low
EPSS
Percentile
94.7%
The connection_state_machine function (connections.c) in lighttpd 1.4.19 and earlier, and 1.5.x before 1.5.0, allows remote attackers to cause a denial of service (active SSL connection loss) by triggering an SSL error, such as disconnecting before a download has finished, which causes all active SSL connections to be lost.
| CPE | Name | Operator | Version |
|---|---|---|---|
| lighttpd:lighttpd | lighttpd | le | 1.4.19 |
| lighttpd:lighttpd | lighttpd | lt | 1.5.0 |
| debian:debian_linux | debian debian linux | eq | 4.0 |
References
lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
secunia.com/advisories/29505
secunia.com/advisories/29544
secunia.com/advisories/29636
secunia.com/advisories/29649
secunia.com/advisories/30023
security.gentoo.org/glsa/glsa-200804-08.xml
trac.lighttpd.net/trac/changeset/2136
trac.lighttpd.net/trac/changeset/2139
trac.lighttpd.net/trac/changeset/2140
trac.lighttpd.net/trac/ticket/285#comment:18
trac.lighttpd.net/trac/ticket/285#comment:21
wiki.rpath.com/wiki/Advisories:rPSA-2008-0132
www.debian.org/security/2008/dsa-1540
www.osvdb.org/43788
www.securityfocus.com/archive/1/490323/100/0/threaded
www.securityfocus.com/bid/28489
www.vupen.com/english/advisories/2008/1063/references
bugs.gentoo.org/show_bug.cgi?id=214892
exchange.xforce.ibmcloud.com/vulnerabilities/41545
issues.rpath.com/browse/RPL-2407
www.redhat.com/archives/fedora-package-announce/2008-April/msg00562.html
www.redhat.com/archives/fedora-package-announce/2008-April/msg00587.html
Social References
More
Related
6.3 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.094 Low
EPSS
Percentile
94.7%