Skip to content
OpenAdvisories

Package · Ubuntu

lighttpd

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2025-8671 Public exploit

    CVE-2025-8671

    A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS). By opening stre…

    varnish-software Fastly SUSE Linux Wind River Linux Debian Ubuntu Alpine crates.io
  • Unscored —
    CVE-2022-30780 Public exploit EPSS 57%

    Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connec…

    lighttpd lighttpd Debian Ubuntu
  • Unscored —
    CVE-2018-19052 Public exploit EPSS 14%

    An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ …

    lighttpd lighttpd Debian Ubuntu
  • Unscored —
    CVE-2014-2323 Public exploit EPSS 63%

    SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary…

    lighttpd lighttpd Debian Ubuntu
  • Unscored —
    CVE-2014-2324 Public exploit EPSS 30%

    Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow…

    lighttpd lighttpd Debian Ubuntu