CVE-2022-30780 - Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connection_read_header_more in connections.c has a typo that disrupts use of multiple read operations on large headers

Back Back to CVE browser

HIGH

Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connection_read_header_more in connections.c has a typo that disrupts use of multiple read operations on large headers

Published Jun 11, 2022

7.5

HIGH

CVSS 3.1

EPSS 56.92%

Description

Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connection_read_header_more in connections.c has a typo that disrupts use of multiple read operations on large headers.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-682

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-52604
Advisory
https://github.com/lighttpd/lighttpd1.4
x_refsource_MISCProductThird Party Advisory
https://github.com/p0dalirius/CVE-2022-30780-lighttpd-denial-of-service
x_refsource_MISCExploitThird Party Advisory
https://podalirius.net/en/cves/2022-30780/
x_refsource_MISCExploitThird Party Advisory
https://redmine.lighttpd.net/issues/3059
x_refsource_MISCIssue TrackingPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-52604		Advisory
https://github.com/lighttpd/lighttpd1.4		x_refsource_MISCProductThird Party Advisory
https://github.com/p0dalirius/CVE-2022-30780-lighttpd-denial-of-service		x_refsource_MISCExploitThird Party Advisory
https://podalirius.net/en/cves/2022-30780/		x_refsource_MISCExploitThird Party Advisory
https://redmine.lighttpd.net/issues/3059		x_refsource_MISCIssue TrackingPatchVendor Advisory