Lucene search

CVE-2018-25103

🗓️ 17 Jun 2024 18:12:15Reported by certccType

There is a use-after-free vulnerability in lighttpd <= 1.4.5

Reporter	Title	Published	Views	Family All 10
NVD	CVE-2018-25103	17 Jun 202418:15	–	nvd
Vulnrichment	CVE-2018-25103 Use-after-free vulnerabilities in lighttpd <= 1.4.50	17 Jun 202418:02	–	vulnrichment
Cvelist	CVE-2018-25103 Use-after-free vulnerabilities in lighttpd <= 1.4.50	17 Jun 202418:02	–	cvelist
OpenVAS	Lighttpd < 1.4.51 Multiple Vulnerabilities	19 Feb 201900:00	–	openvas
Debian CVE	CVE-2018-25103	17 Jun 202418:15	–	debiancve
CERT	Use-after-free vulnerability in lighttpd version 1.4.50 and earlier	9 Jul 202400:00	–	cert
UbuntuCve	CVE-2018-25103	17 Jun 202400:00	–	ubuntucve
OSV	CVE-2018-25103	17 Jun 202418:15	–	osv
OSV	UBUNTU-CVE-2018-25103	17 Jun 202418:15	–	osv
Amazon	Medium: lighttpd	7 Aug 201923:16	–	amazon

[
  {
    "vendor": "lighttpd",
    "product": "lighttpd",
    "versions": [
      {
        "status": "affected",
        "version": "*",
        "lessThanOrEqual": "1.4.50",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
kb	www.kb.cert.org/vuls/id/312260
github	www.github.com/lighttpd/lighttpd1.4/commit/df8e4f95614e476276a55e34da2aa8b00b1148e9
9443417	www.9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2024/AMI-SA-2024002.pdf
runzero	www.runzero.com/blog/lighttpd/
github	www.github.com/lighttpd/lighttpd1.4/commit/d161f53de04bc826ce1bdaeb3dce2c72ca50a3f8
blogvdoo	www.blogvdoo.wordpress.com/2018/11/06/giving-back-securing-open-source-iot-projects/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Jun 2024 18:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS35.3

EPSS0.00044

SSVC