Vulnerability in N/a
CVE-2022-30780
Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connection_read_header_more in connections.c has a typo that disrupts use of multiple read operations on…
EPSS: 0.815 (99.2th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- github.com/lighttpd/lighttpd1.4 (x_refsource_MISC)
- redmine.lighttpd.net/issues/3059 (x_refsource_MISC)
- podalirius.net/en/cves/2022-30780/ (x_refsource_MISC)
- github.com/p0dalirius/CVE-2022-30780-lighttpd-denial-of-service (x_refsource_MISC)
Frequently asked questions
- What is CVE-2022-30780?
- CVE-2022-30780 is a vulnerability in N/a. Published 2022-06-11.
- Is CVE-2022-30780 known to be exploited?
- 19 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.