Vulners
Lucene search
lighttpd < 1.4.25-r1 Denial of Service
| Reporter | Title | Published | Views | Family All 45 |
|---|---|---|---|---|
 | lighttpd -- denial of service vulnerability | 2 Feb 201000:00 | – | freebsd |
 | Security Bulletin: IBM System x Integrated Management Module (IMM) Lighttpd W (CVE-2011-4362, CVE-2010-0295, CVE-2008-4360, CVE-2008-4359, CVE-20084298, CVE-2008-1531) | 30 Jan 201908:20 | – | ibm |
 | CVE-2010-0295 | 2 Feb 201000:00 | – | circl |
 | CVE-2010-0295 | 3 Feb 201019:00 | – | cve |
 | CVE-2010-0295 | 3 Feb 201019:00 | – | cvelist |
 | [SECURITY] [DSA 1987-1] New lighttpd packages fix denial of service | 2 Feb 201011:19 | – | debian |
 | CVE-2010-0295 | 3 Feb 201019:00 | – | debiancve |
 | Debian DSA-1987-1 : lighttpd - denial of service | 24 Feb 201000:00 | – | nessus |
| Fedora 13 : lighttpd-1.4.26-2.fc13 (2010-7611) | 1 Jul 201000:00 | – | nessus |
| Fedora 11 : lighttpd-1.4.26-2.fc11 (2010-7636) | 1 Jul 201000:00 | – | nessus |
10
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 201006-17
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: Normal
Title: lighttpd: Denial of Service
Date: June 03, 2010
Bugs: #303213
ID: 201006-17
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis
========
A processing error in lighttpd might result in a Denial of Service
condition.
Background
==========
lighttpd is a lightweight high-performance web server.
Affected packages
=================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 www-servers/lighttpd < 1.4.25-r1 >= 1.4.25-r1
Description
===========
Li Ming reported that lighttpd does not properly process packets that
are sent overly slow.
Impact
======
A remote attacker might send specially crafted packets to a server
running lighttpd, possibly resulting in a Denial of Service condition
via host memory exhaustion.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All lighttpd users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose
">=www-servers/lighttpd-1.4.25-r1"
References
==========
[ 1 ] CVE-2010-0295
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0295
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-201006-17.xml
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security () gentoo org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2010 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
Attachment: signature.asc
Description:
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
06 Jun 2010 00:00Current
9.5High risk
Vulners AI Score9.5
EPSS0.12111