Vulnerabilities > Lighttpd > Lighttpd > 1.4.50
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-01-06 | CVE-2022-22707 | Out-of-bounds Write vulnerability in multiple products In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes representing -1), as demonstrated by remote denial of service (daemon crash) in a non-default configuration. | 5.9 |
| 2019-04-10 | CVE-2019-11072 | Integer Overflow or Wraparound vulnerability in Lighttpd lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? in burl_normalize_2F_to_slash_fix in burl.c. | 9.8 |