| Package | Affected versions | Patched versions |
|---|---|---|
| lighttpd | ≤ 1.4.15 |
mod_auth (http_auth.c) in lighttpd before 1.4.16 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving (1) a memory leak, (2) use of md5-sess without a cnonce, (3) base64 encoded strings, and (4) trailing whitespace in the Auth-Digest header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free