Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-5533HistoryNov 24, 2012 - 8:55 p.m.
CVE-2012-5533
2012-11-2420:55:04
Debian Security Bug Tracker
security-tracker.debian.org
16
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.663
Percentile
97.9%
The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite loop) via a request with a header containing an empty token, as demonstrated using the โConnection: TE,Keep-Aliveโ header.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | lighttpd | <ย 1.4.31-2 | lighttpd_1.4.31-2_all.deb |
| Debian | 11 | all | lighttpd | <ย 1.4.31-2 | lighttpd_1.4.31-2_all.deb |
| Debian | 999 | all | lighttpd | <ย 1.4.31-2 | lighttpd_1.4.31-2_all.deb |
| Debian | 13 | all | lighttpd | <ย 1.4.31-2 | lighttpd_1.4.31-2_all.deb |
Related
prion
prion
Cross site request forgery (csrf)
2012-11-24 20:55:00
ubuntucve
ubuntucve
CVE-2012-5533
2012-11-24 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2013-179)
2015-09-08 00:00:00
Fedora Update for lighttpd FEDORA-2013-15345
2013-09-06 00:00:00
FreeBSD Ports: lighttpd
2012-11-26 00:00:00
nessus
nessus
Fedora 18 : lighttpd-1.4.32-1.fc18 (2013-15344)
2013-09-04 00:00:00
Amazon Linux AMI : lighttpd (ALAS-2013-179)
2013-09-04 00:00:00
checkpoint_advisories
checkpoint_advisories
lighttpd Connection Header Parsing Denial of Service (CVE-2012-5533)
2012-12-16 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: lighttpd-1.4.32-1.fc18
2013-09-03 22:29:53
[SECURITY] Fedora 19 Update: lighttpd-1.4.32-1.fc19
2013-09-03 22:31:38
freebsd
freebsd
lighttpd -- remote DoS in header parsing
2012-11-17 00:00:00
seebug
seebug
lighttpd็ธๅฝขHTTP Connectionๅๅค็ๆ็ปๆๅกๆผๆด
2012-11-23 00:00:00
lighttpd 1.4.31 Denial of Service PoC
2014-07-01 00:00:00
nvd
nvd
CVE-2012-5533
2012-11-24 20:55:04
cve
cve
CVE-2012-5533
2012-11-24 20:55:04
amazon
amazon
Medium: lighttpd
2013-04-11 17:24:00
cvelist
cvelist
CVE-2012-5533
2012-11-24 20:00:00
exploitdb
exploitdb
lighttpd 1.4.31 - Denial of Service (PoC)
2012-11-22 00:00:00
zdt
zdt
lighttpd 1.4.31 Denial of Service PoC
2012-11-21 00:00:00
packetstorm
packetstorm
Simple Lighttpd 1.4.31 Denial Of Service
2012-11-22 00:00:00
exploitpack
exploitpack
lighttpd 1.4.31 - Denial of Service (PoC)
2012-11-22 00:00:00
myhack58
myhack58
gentoo
gentoo
lighttpd: Multiple vulnerabilities
2014-06-13 00:00:00
osv
osv
lighttpd-1.4.37-1.6 on GA media
2024-06-15 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.663
Percentile
97.9%
Related for DEBIANCVE:CVE-2012-5533