EUVD-2018-21592

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Use-after-free vulnerabilities in lighttpd up to 1.4.50 may read from invalid memory pointers.

Reporter	Title	Published	Views	Family All 16
Amazon	Medium: lighttpd	7 Aug 201900:00	–	amazon
CNNVD	lighttpd Security Vulnerabilities	17 Jun 202400:00	–	cnnvd
CVE	CVE-2018-25103	17 Jun 202418:02	–	cve
Cvelist	CVE-2018-25103 Use-after-free vulnerabilities in lighttpd <= 1.4.50	17 Jun 202418:02	–	cvelist
Debian CVE	CVE-2018-25103	17 Jun 202418:02	–	debiancve
NVD	CVE-2018-25103	17 Jun 202418:15	–	nvd
OpenVAS	Lighttpd < 1.4.51 Multiple Vulnerabilities	19 Feb 201900:00	–	openvas
OSV	DEBIAN-CVE-2018-25103	17 Jun 202418:15	–	osv
OSV	UBUNTU-CVE-2018-25103	17 Jun 202418:15	–	osv
Positive Technologies	PT-2024-10621 · Lighttpd · Lighttpd	17 Jun 202400:00	–	ptsecurity

[
  {
    "enisaIdVendor": [
      {
        "id": "40d95393-c039-3a74-83a1-6fe407a62962",
        "vendor": {
          "name": "lighttpd"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "4b71296b-7994-3331-8f92-5c120a0ceaa9",
        "product": {
          "name": "lighttpd"
        },
        "product_version": "* ≤1.4.50"
      }
    ]
  }
]

Source	Link
blogvdoo	www.blogvdoo.wordpress.com/2018/11/06/giving-back-securing-open-source-iot-projects/
runzero	www.runzero.com/blog/lighttpd/
github	www.github.com/lighttpd/lighttpd1.4/commit/df8e4f95614e476276a55e34da2aa8b00b1148e9
github	www.github.com/lighttpd/lighttpd1.4/commit/d161f53de04bc826ce1bdaeb3dce2c72ca50a3f8
9443417	www.9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2024/AMI-SA-2024002.pdf
kb	www.kb.cert.org/vuls/id/312260
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6Medium risk

Vulners AI Score6

CVSS 3.15.3

EPSS0.00262

SSVC