Summary
It was discovered that lighttpd incorrectly handled certain inputs, which could
result in a stack buffer overflow. A remote attacker could possibly use this
issue to cause a denial of service (DoS). (CVE-2022-22707, CVE-2022-41556)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | lighttpd | 1.4.55-1ubuntu1.20.04.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | lighttpd | 1.4.63-1ubuntu3.1 |
Vulnerabilities 2
-
Unscored —
In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based…
-
Unscored —
A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot ex…