Lucene search

CVE-2024-11148 OpenBSD httpd(8) null dereference

🗓️ 05 Dec 2024 19:19:50Reported by cisa-cgType

OpenBSD httpd(8) vulnerable to NULL dereference in malformed fastcgi request before specific errata.

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2024-11148	5 Dec 202420:15	–	cve
Cvelist	CVE-2024-11148 OpenBSD httpd(8) null dereference	5 Dec 202419:50	–	cvelist
NVD	CVE-2024-11148	5 Dec 202420:15	–	nvd
RedhatCVE	CVE-2024-11148	5 Dec 202422:11	–	redhatcve

[
  {
    "cpes": [
      "cpe:2.3:a:openbsd:openbsd:-:*:*:*:*:*:*:*"
    ],
    "vendor": "openbsd",
    "product": "openbsd",
    "versions": [
      {
        "status": "affected",
        "version": "7.4_errata006"
      },
      {
        "status": "affected",
        "version": "7.3_errata020"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
ftp	www.ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/006_httpd.patch.sig
ftp	www.ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/020_httpd.patch.sig

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Dec 2024 19:50Current

6.9Medium risk

Vulners AI Score6.9

CVSS37.5

CVSS48.7

EPSS0.0004

SSVC

CWE-476