lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size of a file descriptor array, which allows remote attackers to cause a denial of service (crash) via a large number of connections, which triggers an out-of-bounds access.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2008-02-26 10:44
Updated : 2018-10-15 15:04
NVD link : CVE-2008-0983
Mitre link : CVE-2008-0983
JSON object : View
CWE
CWE-399
Resource Management Errors
Products Affected
lighttpd
- lighttpd