In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.
References
| Link | Resource |
|---|---|
| https://lists.debian.org/debian-lts-announce/2022/10/msg00002.html | Mailing List Third Party Advisory |
| https://redmine.lighttpd.net/issues/3165 | Exploit Issue Tracking Third Party Advisory |
| https://security.gentoo.org/glsa/202210-12 | Third Party Advisory |
| https://www.debian.org/security/2022/dsa-5243 | Mailing List Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2022/10/msg00002.html | Mailing List Third Party Advisory |
| https://redmine.lighttpd.net/issues/3165 | Exploit Issue Tracking Third Party Advisory |
| https://security.gentoo.org/glsa/202210-12 | Third Party Advisory |
| https://www.debian.org/security/2022/dsa-5243 | Mailing List Third Party Advisory |
Configurations
History
21 Nov 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://lists.debian.org/debian-lts-announce/2022/10/msg00002.html - Mailing List, Third Party Advisory | |
| References | () https://redmine.lighttpd.net/issues/3165 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://security.gentoo.org/glsa/202210-12 - Third Party Advisory | |
| References | () https://www.debian.org/security/2022/dsa-5243 - Mailing List, Third Party Advisory |
Information
Published : 2022-09-12 15:15
Updated : 2024-11-21 07:15
NVD link : CVE-2022-37797
Mitre link : CVE-2022-37797
CVE.ORG link : CVE-2022-37797
JSON object : View
Products Affected
debian
- debian_linux
lighttpd
- lighttpd
CWE
CWE-476
NULL Pointer Dereference