CVE-2008-0983
26.02.2008, 18:44
lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size of a file descriptor array, which allows remote attackers to cause a denial of service (crash) via a large number of connections, which triggers an out-of-bounds access.Enginsight
| Vendor | Product | Version |
|---|---|---|
| lighttpd | lighttpd | 1.4.7 |
| lighttpd | lighttpd | 1.4.8 |
| lighttpd | lighttpd | 1.4.9 |
| lighttpd | lighttpd | 1.4.10 |
| lighttpd | lighttpd | 1.4.11 |
| lighttpd | lighttpd | 1.4.12 |
| lighttpd | lighttpd | 1.4.13 |
| lighttpd | lighttpd | 1.4.14 |
| lighttpd | lighttpd | 1.4.15 |
| lighttpd | lighttpd | 1.4.16 |
| lighttpd | lighttpd | 1.4.17 |
| lighttpd | lighttpd | 1.4.18 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References