Skip to content
OpenAdvisories

Vendor

lighttpd

2 known vulnerabilities.

Products

lighttpd 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-12642

    HTTP Header Smuggling via Trailer Merge

    lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing. This behavior can be exploited to conduct HTTP Header Smuggling attacks. Successful exploitation may allow an attacker to: * Bypass access control rules * Inject unsafe …

    lighttpd lighttpd lighttpd Ubuntu
  • Medium 5.3
    CVE-2018-25103

    Use-after-free vulnerabilities in lighttpd <= 1.4.50

    There exists use-after-free vulnerabilities in lighttpd <= 1.4.50 request parsing which might read from invalid pointers to memory used in the same request, not from other requests.

    lighttpd lighttpd lighttpd lighttpd Debian Ubuntu