Back to search
CVE-2008-4298
Published: Sep 27, 2008
Modified: Aug 7, 2024
PUBLISHED
Description
Memory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service (memory consumption) via a large number of requests with duplicate request headers.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
32069
third-party-advisory
x_refsource_SECUNIA
http://bugs.gentoo.org/show_bug.cgi?id=238180
x_refsource_CONFIRM
32972
third-party-advisory
x_refsource_SECUNIA
[oss-security] 20080926 CVE Request (lighttpd)
mailing-list
x_refsource_MLIST
http://trac.lighttpd.net/trac/changeset/2305
x_refsource_CONFIRM
http://wiki.rpath.com/Advisories:rPSA-2008-0309
x_refsource_CONFIRM
lighttpd-httprequestparse-dos(45471)
vdb-entry
x_refsource_XF
32834
third-party-advisory
x_refsource_SECUNIA
31434
vdb-entry
x_refsource_BID
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0309
x_refsource_CONFIRM
32132
third-party-advisory
x_refsource_SECUNIA
http://www.lighttpd.net/security/lighttpd_sa_2008_07.txt
x_refsource_CONFIRM
20081030 rPSA-2008-0309-1 lighttpd
mailing-list
x_refsource_BUGTRAQ
ADV-2008-2741
vdb-entry
x_refsource_VUPEN
DSA-1645
vendor-advisory
x_refsource_DEBIAN
32480
third-party-advisory
x_refsource_SECUNIA
SUSE-SR:2008:026
vendor-advisory
x_refsource_SUSE
http://trac.lighttpd.net/trac/ticket/1774
x_refsource_CONFIRM
GLSA-200812-04
vendor-advisory
x_refsource_GENTOO
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now