[SECURITY] [DLA 3133-1] lighttpd security update

Debian LTS Advisory DLA-3133-1 [email protected] https://www.debian.org/lts/security/ Helmut Grohne October 03, 2022 https://wiki.debian.org/LTS Package : lighttpd Version : 1.4.53-4+deb10u3 CVE ID : CVE-2022-37797 An invalid HTTP request websocket handshake may cause a NULL pointer...

The vulnerability of the Lighttpd microprogramming software library in routers from D-LINK models DIR-867, DIR-878, and DIR-882-US allows a hacker to execute arbitrary code.

The vulnerability of the Lighttpd microprogramming software-based router libraries from D-LINK models DIR-867, DIR-878, and DIR-882-US stems from buffer overflows in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted HTTP request se...

Security update for lighttpd (moderate)

openSUSE Security Update: Security update for lighttpd Announcement ID: openSUSE-SU-2022:10140-1 Rating: moderate References: 1203872 Cross-References: CVE-2022-41556 CVSS scores: CVE-2022-41556 SUSE: 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP...

DLA-3133-1 lighttpd - security update

Bulletin has no description...

openSUSE 15 Security Update : lighttpd (openSUSE-SU-2022:10132-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:10132-1 advisory. - In lighttpd 1.4.65, modwstunnel does not initialize a handler function pointer if an invalid HTTP request websocket handshake is received. It lea...

OPENSUSE-SU-2022:10132-1 Security update for lighttpd

This update for lighttpd fixes the following issues: lighttpd was updated to 1.4.66: a number of bug fixes Fix HTTP/2 downloads = 4GiB Fix SIGUSR1 graceful restart with TLS futher bug fixes CVE-2022-37797: null pointer dereference in modwstunnel, possibly a remotely triggerable crash boo1203358 I...

Debian: Security Advisory (DSA-5243-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for lighttpd (moderate)

openSUSE Security Update: Security update for lighttpd Announcement ID: openSUSE-SU-2022:10132-1 Rating: moderate References: 1203358 Cross-References: CVE-2022-37797 CVSS scores: CVE-2022-37797 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-37797 SUSE: 7.5...

Debian DSA-5243-1 : lighttpd - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5243 advisory. Several vulnerabilities were discovered in lighttpd, a fast webserver with minimal memory footprint. CVE-2022-37797 An invalid HTTP request websocket handshake ma...

Lighttpd < 1.4.67 DoS Vulnerability

Lighttpd is prone to a denial of service DoS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

[SECURITY] [DSA 5243-1] lighttpd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5243-1 [email protected] https://www.debian.org/security/ Helmut Grohne September 28, 2022 https://www.debian.org/security/faq -...

DSA-5243-1 lighttpd - security update

Bulletin has no description...

lighttpd 安全漏洞

lighttpd is an open source web server developed by Jan Kneschke in Germany. A security vulnerability exists in lighttpd that originates from a denial-of-service attack that can be triggered via CLOSEWAIT / CONSTATEREADPOST...

D-Link Multiple Routers lighttpd Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the lighttpd service, which listens on TCP port 80 by default. The iss...

Denial Of Service (DoS)

lighttpd is vulnerable to denial of service. The vulnerability exists due to a lack of initialization when an invalide HTTP request websocket handshake leading to a null pointer dereference allowing an attacker to crash the system...

Lighttpd < 1.4.66 DoS Vulnerability

Lighttpd is prone to a denial of service DoS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

DEBIAN-CVE-2022-37797

In lighttpd 1.4.65, modwstunnel does not initialize a handler function pointer if an invalid HTTP request websocket handshake is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition...

CVE-2022-37797

In lighttpd 1.4.65, modwstunnel does not initialize a handler function pointer if an invalid HTTP request websocket handshake is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition...

UBUNTU-CVE-2022-37797

In lighttpd 1.4.65, modwstunnel does not initialize a handler function pointer if an invalid HTTP request websocket handshake is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition...

CVE-2022-37797

In lighttpd 1.4.65, modwstunnel does not initialize a handler function pointer if an invalid HTTP request websocket handshake is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition...