Test Kennung:	1.3.6.1.4.1.25623.1.0.147394
Kategorie:	Denial of Service
Titel:	Lighttpd 1.4.46 - 1.4.63 DoS Vulnerability
Zusammenfassung:	Lighttpd is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: Lighttpd is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes representing -1), as demonstrated by remote denial of service (daemon crash) in a non-default configuration. The non-default configuration requires handling of the Forwarded header in a somewhat unusual manner. Also, a 32-bit system is much more likely to be affected than a 64-bit system. Affected Software/OS: Lighttpd version 1.4.46 through 1.4.63. Solution: Update to version 1.4.64 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2022-22707 Debian Security Information: DSA-5040 (Google Search) https://www.debian.org/security/2022/dsa-5040 https://redmine.lighttpd.net/issues/3134
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.