Lucene search
MitreCVELIST:CVE-2022-41556HistoryOct 06, 2022 - 12:00 a.m.
CVE-2022-41556
2022-10-0600:00:00
mitre
www.cve.org
7
resource leak
denial of service
http/1.1
mod_fastcgi
rdhup
tcp behavior
cve-2022-41556
EPSS
0.002
Percentile
62.2%
A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a large amount of anomalous TCP behavior by clients. It is related to RDHUP mishandling in certain HTTP/1.1 chunked situations. Use of mod_fastcgi is, for example, affected. This is fixed in 1.4.67.
References
git.lighttpd.net/lighttpd/lighttpd1.4/commit/b18de6f9264f914f7bf493abd3b6059343548e50
github.com/lighttpd/lighttpd1.4/compare/lighttpd-1.4.66...lighttpd-1.4.67
github.com/lighttpd/lighttpd1.4/pull/115
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OVOSBSCMLGCHH2Z74H64ZWVDFJFQTBC2/
security.gentoo.org/glsa/202210-12
Related
nessus
nessus
Fedora 35 : lighttpd (2022-c26b19568d)
2022-12-23 00:00:00
GLSA-202210-12 : Lighttpd: Denial of Service
2022-10-31 00:00:00
Debian DSA-5243-1 : lighttpd - security update
2022-09-29 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: lighttpd-1.4.67-1.fc35
2022-10-05 13:50:55
alpinelinux
alpinelinux
CVE-2022-41556
2022-10-06 18:17:03
osv
osv
CVE-2022-41556
2022-10-06 18:17:03
lighttpd-1.4.67-2.1 on GA media
2024-06-15 00:00:00
lighttpd vulnerabilities
2023-02-28 15:42:16
prion
prion
Design/Logic Flaw
2022-10-06 18:17:00
veracode
veracode
Denial Of Service (DoS)
2022-10-11 13:39:08
openvas
openvas
Lighttpd < 1.4.67 DoS Vulnerability
2022-09-29 00:00:00
openSUSE: Security Advisory for lighttpd (openSUSE-SU-2022:10140-1)
2024-03-04 00:00:00
Fedora: Security Advisory for lighttpd (FEDORA-2022-c26b19568d)
2022-10-06 00:00:00
ubuntucve
ubuntucve
CVE-2022-41556
2022-10-06 00:00:00
nvd
nvd
CVE-2022-41556
2022-10-06 18:17:03
debiancve
debiancve
CVE-2022-41556
2022-10-06 18:17:03
suse
suse
Security update for lighttpd (moderate)
2022-10-03 00:00:00
redos
redos
ROS-20221007-02
2022-10-07 00:00:00
cve
cve
CVE-2022-41556
2022-10-06 18:17:03
gentoo
gentoo
Lighttpd: Denial of Service
2022-10-31 00:00:00
mageia
mageia
Updated lighttpd packages fix security vulnerability
2022-10-13 23:05:19
ubuntu
ubuntu
lighttpd vulnerabilities
2023-02-28 00:00:00
debian
debian
[SECURITY] [DSA 5243-1] lighttpd security update
2022-09-28 16:05:19
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00