CVE-2022-41556

概要

参考情報

• git.lighttpd.net/lighttpd/lighttpd1.4/commit/b18de6f9264f914f7bf493abd3b6059343548e50 · Patch
• lighttpd/lighttpd1.4 · Third Party Advisory
• lighttpd/lighttpd1.4#115 · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OVOSBSCMLGCHH2Z74H64ZWVDFJFQTBC2
• security.gentoo.org/glsa/202210-12 · Third Party Advisory

lighttpd のその他の脆弱性

• CVE-2025-12642緊急 9.1lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing. This behavior can be exploited to conduct HTTP Hea…
• CVE-2022-37797高 7.5In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received…
• CVE-2022-30780高 7.5Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connec…
• CVE-2022-22707中 5.9In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 b…
• CVE-2019-11072緊急 9.8lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or…