Unscored DSA-5243-1 2 CVEs

lighttpd - security update

Published Sep 28, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	lighttpd	1.4.59-1+deb11u2

Vulnerabilities 2

Unscored —

CVE-2022-37797

In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket h…

lighttpd lighttpd Debian Ubuntu

Sep 12, 2022
Unscored —

CVE-2022-41556

A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot ex…

lighttpd lighttpd lighttpd Debian Ubuntu Alpine

Oct 6, 2022