lighttpd vulnerabilities (openSUSE)
21 vulnerabilities.
-
lighttpdopenSUSE CVE-2025-8671 7.5 High -
lighttpdopenSUSE Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
lighttpdopenSUSE A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of... 7.5 High -
lighttpdopenSUSE In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid... 7.5 High -
lighttpdopenSUSE In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward... 5.9 Medium -
lighttpdopenSUSE An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50.... 7.5 High -
lighttpdopenSUSE Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in... 5.0 Medium -
lighttpdopenSUSE SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote... 9.8 Critical -
lighttpdopenSUSE Use-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial... 5.0 Medium -
lighttpdopenSUSE lighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3)... 7.6 High -
lighttpdopenSUSE lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier... 7.5 High -
lighttpdopenSUSE The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote... 5.0 Medium -
lighttpdopenSUSE Integer signedness error in the base64_decode function in the HTTP authentication functionality ... 5.0 Medium -
lighttpdopenSUSE lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a... 5.0 Medium -
lighttpdopenSUSE lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite... 7.5 High -
lighttpdopenSUSE The connection_state_machine function (connections.c) in lighttpd 1.4.19 and earlier, and 1.5.x... 4.3 Medium -
lighttpdopenSUSE mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME... 5.0 Medium -
lighttpdopenSUSE mod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a... 5.0 Medium -
lighttpdopenSUSE lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size... 5.0 Medium -
lighttpdopenSUSE lighttpd before 1.4.14 allows attackers to cause a denial of service (crash) via a request to a... 7.8 High -
lighttpdopenSUSE lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service (cpu and resource... 5.0 Medium