CVE-2014-2323

概要

参考情報

• download.lighttpd.net/lighttpd/security/lighttpd_sa_2014_01.txt · Exploit
• jvn.jp/en/jp/JVN37417423/index.html · Third Party Advisory
• lists.opensuse.org/opensuse-security-announce/2014-03/msg00023.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2014-04/msg00002.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2014-04/msg00006.html · Mailing List
• marc.info · Mailing List
• seclists.org/oss-sec/2014/q1/561 · Exploit
• seclists.org/oss-sec/2014/q1/564 · Mailing List
• secunia.com/advisories/57404 · Broken Link
• secunia.com/advisories/57514 · Broken Link
• debian.org/security/2014/dsa-2877 · Third Party Advisory
• lighttpd.net/2014/3/12/1.4.35 · Patch

lighttpd のその他の脆弱性

• CVE-2025-12642緊急 9.1lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing. This behavior can be exploited to conduct HTTP Hea…
• CVE-2022-41556高 7.5A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a lar…
• CVE-2022-37797高 7.5In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received…
• CVE-2022-30780高 7.5Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connec…
• CVE-2022-22707中 5.9In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 b…