| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
lighttpd: denial of service
| Package(s): | lighttpd | CVE #(s): | CVE-2008-0983 | ||||||||||||||||||
| Created: | February 29, 2008 | Updated: | July 15, 2008 | ||||||||||||||||||
| Description: | From the CVE entry: lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size of a file descriptor array, which allows remote attackers to cause a denial of service (crash) via a large number of connections, which triggers an out-of-bounds access. | ||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||
(Log in to post comments)