Unscored DSA-1987-1 1 CVE

lighttpd - denial of service

Published Feb 2, 2010 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 4.0	lighttpd	1.4.13-4etch12
Debian · 5.0	lighttpd	1.4.19-5+lenny1

Vulnerabilities 1

Unscored —

CVE-2010-0295 Public exploit EPSS 12%

lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows r…

lighttpd Debian

Feb 3, 2010