Lucene search
Veracode Vulnerability DatabaseVERACODE:37510HistoryOct 11, 2022 - 1:39 p.m.
Denial Of Service (DoS)
2022-10-1113:39:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
lighttpd
denial of service
gw_backend.c
resource leak
connection slot exhaustion
anomalous tcp behavior
application crash
vulnerability
EPSS
0.002
Percentile
62.2%
lighttpd is vulnerable to denial of service. The vulnerability exists in gw_backend.c where there is a resource leak which will lead to a connection slot exhaustion after a large amount of anomalous TCP behavior causing an application crash.
References
git.lighttpd.net/lighttpd/lighttpd1.4/commit/b18de6f9264f914f7bf493abd3b6059343548e50
github.com/lighttpd/lighttpd1.4/compare/lighttpd-1.4.66...lighttpd-1.4.67
github.com/lighttpd/lighttpd1.4/pull/115
lists.fedoraproject.org/archives/list/[email protected]/message/OVOSBSCMLGCHH2Z74H64ZWVDFJFQTBC2/
security-tracker.debian.org/tracker/CVE-2022-41556
security.gentoo.org/glsa/202210-12
Related
nessus
nessus
Fedora 35 : lighttpd (2022-c26b19568d)
2022-12-23 00:00:00
GLSA-202210-12 : Lighttpd: Denial of Service
2022-10-31 00:00:00
Debian DSA-5243-1 : lighttpd - security update
2022-09-29 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: lighttpd-1.4.67-1.fc35
2022-10-05 13:50:55
alpinelinux
alpinelinux
CVE-2022-41556
2022-10-06 18:17:03
osv
osv
CVE-2022-41556
2022-10-06 18:17:03
lighttpd-1.4.67-2.1 on GA media
2024-06-15 00:00:00
lighttpd vulnerabilities
2023-02-28 15:42:16
openvas
openvas
Lighttpd < 1.4.67 DoS Vulnerability
2022-09-29 00:00:00
openSUSE: Security Advisory for lighttpd (openSUSE-SU-2022:10140-1)
2024-03-04 00:00:00
Fedora: Security Advisory for lighttpd (FEDORA-2022-c26b19568d)
2022-10-06 00:00:00
prion
prion
Design/Logic Flaw
2022-10-06 18:17:00
ubuntucve
ubuntucve
CVE-2022-41556
2022-10-06 00:00:00
nvd
nvd
CVE-2022-41556
2022-10-06 18:17:03
debiancve
debiancve
CVE-2022-41556
2022-10-06 18:17:03
suse
suse
Security update for lighttpd (moderate)
2022-10-03 00:00:00
cvelist
cvelist
CVE-2022-41556
2022-10-06 00:00:00
redos
redos
ROS-20221007-02
2022-10-07 00:00:00
cve
cve
CVE-2022-41556
2022-10-06 18:17:03
gentoo
gentoo
Lighttpd: Denial of Service
2022-10-31 00:00:00
mageia
mageia
Updated lighttpd packages fix security vulnerability
2022-10-13 23:05:19
debian
debian
[SECURITY] [DSA 5243-1] lighttpd security update
2022-09-28 16:05:19
ubuntu
ubuntu
lighttpd vulnerabilities
2023-02-28 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00