ID de Prueba:	1.3.6.1.4.1.25623.1.0.147394
Categoría:	Denial of Service
Título:	Lighttpd 1.4.46 - 1.4.63 DoS Vulnerability
Resumen:	Lighttpd is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: Lighttpd is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes representing -1), as demonstrated by remote denial of service (daemon crash) in a non-default configuration. The non-default configuration requires handling of the Forwarded header in a somewhat unusual manner. Also, a 32-bit system is much more likely to be affected than a 64-bit system. Affected Software/OS: Lighttpd version 1.4.46 through 1.4.63. Solution: Update to version 1.4.64 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2022-22707 Debian Security Information: DSA-5040 (Google Search) https://www.debian.org/security/2022/dsa-5040 https://redmine.lighttpd.net/issues/3134
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.