Lucene search

K
freebsdFreeBSDD2B48D30-EA97-11DB-A802-000FEA2763CE
HistoryDec 15, 2006 - 12:00 a.m.

lighttpd -- Remote DOS in CRLF parsing

2006-12-1500:00:00
vuxml.freebsd.org
15

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.222 Low

EPSS

Percentile

96.5%

Lighttpd SA:

If the connection aborts during parsing “\r\n\r\n” the server
might get into a infinite loop and use 100% of the CPU time.
lighttpd still responses to other requests. This can be repeated
until either the server limit for concurrent connections or file
descriptors is reached.
The bug was reported and fixed by Robert Jakabosky.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlighttpd< 1.4.13_2UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.222 Low

EPSS

Percentile

96.5%