CVE-2013-4560

Use-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial of service (segmentation fault and crash) via unspecified vectors that trigger FAMMonitorDirectory failures.
Configurations

Configuration 1 (hide)

cpe:2.3:a:lighttpd:lighttpd:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

History

21 Nov 2024, 01:55

Type Values Removed Values Added
References () http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2013_03.txt - Vendor Advisory () http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2013_03.txt - Vendor Advisory
References () http://jvn.jp/en/jp/JVN37417423/index.html - Third Party Advisory () http://jvn.jp/en/jp/JVN37417423/index.html - Third Party Advisory
References () http://lists.opensuse.org/opensuse-updates/2014-01/msg00049.html - Mailing List, Third Party Advisory () http://lists.opensuse.org/opensuse-updates/2014-01/msg00049.html - Mailing List, Third Party Advisory
References () http://marc.info/?l=bugtraq&m=141576815022399&w=2 - Mailing List, Third Party Advisory () http://marc.info/?l=bugtraq&m=141576815022399&w=2 - Mailing List, Third Party Advisory
References () http://secunia.com/advisories/55682 - Third Party Advisory () http://secunia.com/advisories/55682 - Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2013/11/12/4 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2013/11/12/4 - Mailing List, Third Party Advisory
References () https://www.debian.org/security/2013/dsa-2795 - Third Party Advisory () https://www.debian.org/security/2013/dsa-2795 - Third Party Advisory

Information

Published : 2013-11-20 14:12

Updated : 2024-11-21 01:55


NVD link : CVE-2013-4560

Mitre link : CVE-2013-4560

CVE.ORG link : CVE-2013-4560


JSON object : View

Products Affected

debian

  • debian_linux

opensuse

  • opensuse

lighttpd

  • lighttpd
CWE
CWE-416

Use After Free