Lucene search

K
cvelistRedhatCVELIST:CVE-2012-5533
HistoryNov 24, 2012 - 8:00 p.m.

CVE-2012-5533

2012-11-2420:00:00
redhat
raw.githubusercontent.com
1

6.4 Medium

AI Score

Confidence

High

0.711 High

EPSS

Percentile

98.0%

The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite loop) via a request with a header containing an empty token, as demonstrated using the โ€œConnection: TE,Keep-Aliveโ€ header.