Description
In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenBSD | OpenBSD | 7.4 – < 7.4 errata 006, 7.3 – < 7.3 errata 020 | 7.4 errata 006 |
Advisories 1
- WID-SEC-2024-3620 OpenBSD: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 5, 2024