Lighttpd 漏洞

时间轴

版本

1.4.1518
1.4.716
1.4.816
1.4.1016
1.4.1216

修正

Official Fix36
Temporary Fix0
Workaround0
Unavailable0
Not Defined4

易受攻击性

High4
Functional2
Proof-of-Concept24
Unproven0
Not Defined10

访问向量

Not Defined0
Physical0
Local2
Adjacent0
Network38

身份验证

Not Defined0
High0
Low2
None38

用户交互

Not Defined0
Required0
None40

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤44
≤50
≤612
≤78
≤88
≤98
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤58
≤66
≤714
≤84
≤94
≤100

VulDB

≤10
≤20
≤30
≤44
≤50
≤614
≤76
≤812
≤94
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤84
≤90
≤104

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k8
<2k24
<5k4
<10k0
<25k2
<50k2
<100k0
≥100k0

本日攻击

<1k38
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (89): 1.0.2, 1.0.3, 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8, 1.1.9, 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5, 1.3.6, 1.3.7, 1.3.8, 1.3.9, 1.3.11, 1.3.12, 1.3.13, 1.3.14, 1.3.15, 1.3.16, 1.4, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4.6, 1.4.7, 1.4.8, 1.4.9, 1.4.11, 1.4.12, 1.4.13, 1.4.14, 1.4.15, 1.4.16, 1.4.17, 1.4.18, 1.4.19, 1.4.21, 1.4.22, 1.4.23, 1.4.24, 1.4.25, 1.4.26, 1.4.27, 1.4.28, 1.4.29, 1.4.31, 1.4.32, 1.4.33, 1.4.34, 1.4.35, 1.4.36, 1.4.37, 1.4.38, 1.4.39, 1.4.41, 1.4.42, 1.4.43, 1.4.44, 1.4.45, 1.4.46, 1.4.47, 1.4.48, 1.4.49, 1.4.51, 1.4.52, 1.4.53, 1.4.54, 1.4.55, 1.4.56, 1.4.57, 1.4.58, 1.4.59, 1.4.61, 1.4.62, 1.4.63, 1.4.64, 1.4.65, 1.4.66

软件类型: Web Server

已发布BaseTemp漏洞0day今天易修正CTICVE
2022-10-066.46.3lighttpd TCP gw_backend.c 拒绝服务$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-41556
2022-09-135.55.5lighttpd HTTP Request mod_wstunnel 拒绝服务$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2022-37797
2022-06-125.35.3Lighttpd Header connections.c connection_read_header_more 拒绝服务$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-30780
2022-01-066.36.3lighttpd mod_extforward Plugin mod_extforward_Forwarded 内存损坏$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2022-22707
2019-04-108.58.4lighttpd burl.c burl_normalize_2F_to_slash_fix 内存损坏$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2019-11072
2018-11-077.47.2lighttpd mod_alias_physical_handler mod_alias.c 目录遍历$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2018-19052
2015-05-256.46.0lighttpd Log File mod_mysql_vhost.c 权限升级$0-$5k$0-$5kUnprovenOfficial Fix0.00CVE-2015-3200
2015-05-257.57.1lighttpd Log File http_auth.c 权限升级$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.03CVE-2015-3200
2014-04-015.34.6lighttpd 拒绝服务$0-$5k$0-$5kUnprovenOfficial Fix0.07CVE-2014-2469
2014-03-145.35.1lighttpd mod_evhost 目录遍历$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2014-2324

29 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 29 results.

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!