lighttpd -- Remote DOS in CRLF parsing

ID D2B48D30-EA97-11DB-A802-000FEA2763CE
Type freebsd
Reporter FreeBSD
Modified 2006-12-15T00:00:00


Lighttpd SA:

If the connection aborts during parsing "\r\n\r\n" the server might get into a infinite loop and use 100% of the CPU time. lighttpd still responses to other requests. This can be repeated until either the server limit for concurrent connections or file descriptors is reached. The bug was reported and fixed by Robert Jakabosky.