lighttpd 资源管理错误漏洞

lighttpd is an open source web server developed by Jan Kneschke in Germany. A security vulnerability exists in Lighttpd versions 1.4.56 through 1.4.58, which stems from a misspelling of connectionreadheadermore in connections.c that breaks the use of multiple read operations on large headers...

Exploit for Incorrect Calculation in Lighttpd

CVE-2022-30780 - lighttpd remote denial of service CVE-20...

PT-2022-20313 · Lighttpd +1 · Lighttpd +1

Name of the Vulnerable Software and Affected Versions: Lighttpd versions 1.4.56 through 1.4.58 Description: The issue allows a remote attacker to cause a denial of service due to CPU consumption from stuck connections. This is because a typo in the connection read header more function in...