lighttpd vulnerabilities (Mageia)

12 vulnerabilities.

• lighttpd Mageia CVE-2025-8671 CVE-2025-8671 Public exploitFix available 7.5 HighAugust 13, 2025
• lighttpd Mageia A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of... CVE-2022-41556 Fix available 7.5 HighSeptember 28, 2022
• lighttpd Mageia In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid... CVE-2022-37797 Fix available 7.5 HighSeptember 12, 2022
• lighttpd Mageia In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward... CVE-2022-22707 Fix available 5.9 MediumJanuary 6, 2022
• lighttpd Mageia Updated lighttpd packages fix security vulnerabilities MGASA-2018-0430 Fix available No scoreNovember 3, 2018
• lighttpd Mageia mod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a... CVE-2015-3200 Fix available 7.5 HighJune 9, 2015
• lighttpd Mageia Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in... CVE-2014-2324 Public exploitFix available EPSS 29.5% 5.0 MediumMarch 12, 2014
• lighttpd Mageia SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote... CVE-2014-2323 Public exploitFix available EPSS 62.8% 9.8 CriticalMarch 12, 2014
• lighttpd Mageia Use-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial... CVE-2013-4560 Fix available 5.0 MediumNovember 13, 2013
• lighttpd Mageia lighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3)... CVE-2013-4559 Fix available EPSS 10.7% 7.6 HighNovember 13, 2013
• lighttpd Mageia lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier... CVE-2013-4508 Fix available 7.5 HighNovember 8, 2013
• lighttpd Mageia lighttpd - security update CVE-2016-1000212 Fix available No scoreJanuary 1, 0001