Lucene search
+L

3188 matches found

OSV
OSV
added 2022/01/22 11:3 a.m.6 views

OESA-2022-1491 lighttpd security update

Secure, fast, compliant and very flexible web-server which has been optimized for high-performance environments. It has a very low memory footprint compared to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many more...

5.9CVSS7.3AI score0.08969EPSS
SaveExploits1References2
NVD
NVD
added 2022/01/06 6:15 a.m.19 views

CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS0.08969EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/06 6:15 a.m.8 views

CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS6.6AI score0.08969EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/06 6:15 a.m.4 views

ALPINE-CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS7.3AI score0.08969EPSS
SaveExploits1References1
Prion
Prion
added 2022/01/06 6:15 a.m.152 views

Stack overflow

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

4.3CVSS6AI score0.08969EPSS
SaveExploits1References2Affected Software2
OSV
OSV
added 2022/01/06 6:15 a.m.2 views

UBUNTU-CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS6.2AI score0.08969EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2022/01/06 6:15 a.m.39 views

CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS6.6AI score0.08969EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/01/06 5:55 a.m.39 views

CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

6.3AI score0.08969EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2022/01/06 5:55 a.m.73 views

CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS6.1AI score0.08969EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/01/06 5:55 a.m.68 views

CVE-2022-22707

In lighttpd 1.4.46 through 1.4.63, the modextforwardForwarded function of the modextforward plugin has a stack-based buffer overflow 4 bytes representing -1, as demonstrated by remote denial of service daemon crash in a non-default configuration. The non-default configuration requires handling of...

5.9CVSS5.9AI score0.08969EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2022/01/06 12:0 a.m.6 views

PT-2022-15645 · Lighttpd +3 · Lighttpd +3

Name of the Vulnerable Software and Affected Versions: lighttpd versions 1.4.46 through 1.4.63 Description: The mod extforward Forwarded function of the mod extforward plugin in lighttpd has a stack-based buffer overflow, which can be exploited for remote denial of service daemon crash in a...

7.5CVSS7.4AI score0.08969EPSS
SaveExploits5References38
Snyk
Snyk
added 2022/01/05 3:31 p.m.4 views

Information Exposure

Overview std/math/big is a Go standard library package std/math/big Affected versions of this package are vulnerable to Information Exposure. Go Vulnerability Report: Int.Exp Montgomery mishandled carry propagation and produced an incorrect output, which makes it easier for attackers to obtain...

8.7CVSS6.4AI score0.02627EPSS
SaveExploits0References3
OSV
OSV
added 2022/01/05 3:31 p.m.47 views

GO-2021-0160 Incorrect calculation affecting RSA computations in math/big

Int.Exp Montgomery mishandled carry propagation and produced an incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors. This issue can affect RSA computations in crypto/rsa, which is used by crypto/tls. TLS servers on 32-bit systems could plausibl...

7.5CVSS7.2AI score0.02627EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.11 views

Microsoft Windows TCP/IP component 缓冲区错误漏洞

The Microsoft Windows TCP/IP component is a component of Microsoft Corporation USA that provides TCP/IP configuration capabilities for Windows. A buffer error vulnerability exists in the Microsoft Windows TCP/IP component. The following products and editions are affected: Windows 10 Version 2004...

7.8CVSS8AI score0.00901EPSS
SaveExploits0References7
Mageia
Mageia
added 2021/12/08 8:4 p.m.73 views

Updated gmp packages fix security vulnerability

Integer overflow in mpz/inpraw.c and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms...

7.5CVSS4.5AI score0.03425EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/08 6:17 p.m.28 views

Security Bulletin: IBM® Db2® under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and cause a denial of service. (CVE-2021-29763)

Summary IBM® Db2® under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and cause a denial of service. Vulnerability Details CVEID: CVE-2021-29763 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect...

5.1CVSS5.9AI score0.00254EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2021/12/08 9:55 a.m.25 views

CVE-2021-20047

SonicWall Global VPN client version 4.10.6 32-bit and 64-bit and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system...

8.1AI score0.00851EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/11/24 1:15 a.m.6 views

CVE-2021-28706

guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrator established limit. This is a result of a calculation done with 32-bit precision, which may...

8.6CVSS5.5AI score0.0206EPSS
SaveExploits0References8Affected Software1
Debian CVE
Debian CVE
added 2021/11/24 12:0 a.m.51 views

CVE-2021-28706

guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrator established limit. This is a result of a calculation done with 32-bit precision, which may...

8.6CVSS1.2AI score0.0206EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2021/11/19 8:0 a.m.5 views

GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input leading to a segmentation fault on 32-bit platforms.

...

7.5CVSS8.2AI score0.03425EPSS
SaveExploits1
Rows per page
Query Builder