CVE-2008-4298

2008-09-2710:30:03

Debian Security Bug Tracker

security-tracker.debian.org

0.111 Low

EPSS

Percentile

95.2%

JSON

Memory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service (memory consumption) via a large number of requests with duplicate request headers.

OSVersionArchitecturePackageVersionFilename
Debian12alllighttpd< 1.4.19-5lighttpd_1.4.19-5_all.deb
Debian11alllighttpd< 1.4.19-5lighttpd_1.4.19-5_all.deb
Debian10alllighttpd< 1.4.19-5lighttpd_1.4.19-5_all.deb
Debian999alllighttpd< 1.4.19-5lighttpd_1.4.19-5_all.deb
Debian13alllighttpd< 1.4.19-5lighttpd_1.4.19-5_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	lighttpd	< 1.4.19-5	lighttpd_1.4.19-5_all.deb
Debian	11	all	lighttpd	< 1.4.19-5	lighttpd_1.4.19-5_all.deb
Debian	10	all	lighttpd	< 1.4.19-5	lighttpd_1.4.19-5_all.deb
Debian	999	all	lighttpd	< 1.4.19-5	lighttpd_1.4.19-5_all.deb
Debian	13	all	lighttpd	< 1.4.19-5	lighttpd_1.4.19-5_all.deb

CVE-2008-4298

Related