| Package | Affected versions | Patched versions |
|---|---|---|
| lighttpd | = 1.4.56= 1.4.57= 1.4.58 |
Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connection_read_header_more in connections.c has a typo that disrupts use of multiple read operations on large headers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free