lighttpd vulnerabilities (Debian)
37 vulnerabilities.
-
lighttpdDebian Use-after-free vulnerabilities in lighttpd <= 1.4.50 5.3 Medium -
lighttpdDebian A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of... 7.5 High -
lighttpdDebian In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid... 7.5 High -
lighttpdDebian Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU... 7.5 High -
lighttpdDebian In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward... 5.9 Medium -
lighttpdDebian ** DISPUTED ** lighttpd before 1.4.54 has a signed integer overflow, which might allow remote... 9.8 Critical -
lighttpdDebian An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50.... 7.5 High -
lighttpdDebian mod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a... 7.5 High -
lighttpdDebian Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in... 5.0 Medium -
lighttpdDebian SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote... 9.8 Critical -
lighttpdDebian Use-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial... 5.0 Medium -
lighttpdDebian lighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3)... 7.6 High -
lighttpdDebian lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier... 7.5 High -
lighttpdDebian The configuration file for the FastCGI PHP support for lighttpd before 1.4.28 on Debian GNU/Linux... 1.9 Low -
lighttpdDebian The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote... 5.0 Medium -
lighttpdDebian The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other... 2.6 Low -
lighttpdDebian The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic... 3.4 Low -
lighttpdDebian Integer signedness error in the base64_decode function in the HTTP authentication functionality ... 5.0 Medium -
lighttpdDebian The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet... 4.3 Medium -
lighttpdDebian lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a... 5.0 Medium -
lighttpdDebian Apache Tomcat affected by vulnerability in TLS and SSL protocol 5.8 Medium -
lighttpdDebian mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is... 7.5 High -
lighttpdDebian lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite... 7.5 High -
lighttpdDebian Memory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows... 5.0 Medium -
lighttpdDebian The connection_state_machine function (connections.c) in lighttpd 1.4.19 and earlier, and 1.5.x... 4.3 Medium -
lighttpdDebian mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME... 5.0 Medium -
lighttpdDebian mod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a... 5.0 Medium -
lighttpdDebian lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size... 5.0 Medium -
lighttpdDebian Buffer overflow in the fcgi_env_add function in mod_proxy_backend_fastcgi.c in the mod_fastcgi... 6.8 Medium -
lighttpdDebian lighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of... 4.3 Medium -
lighttpdDebian mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows... 8.3 High -
lighttpdDebian connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum... 4.3 Medium -
lighttpdDebian request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash)... 5.8 Medium -
lighttpdDebian mod_auth (http_auth.c) in lighttpd before 1.4.16 allows remote attackers to cause a denial of... 6.4 Medium -
lighttpdDebian lighttpd before 1.4.14 allows attackers to cause a denial of service (crash) via a request to a... 7.8 High -
lighttpdDebian lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service (cpu and resource... 5.0 Medium -
lighttpdDebian lighttpd - security update No score