Description
The connection_state_machine function (connections.c) in lighttpd 1.4.19 and earlier, and 1.5.x before 1.5.0, allows remote attackers to cause a denial of service (active SSL connection loss) by triggering an SSL error, such as disconnecting before a download has finished, which causes all active SSL connections to be lost.
Remediation
References
Related Vulnerabilities
WordPress Plugin Top 10-Popular posts for WordPress Multiple Vulnerabilities (3.2.4)
WordPress Plugin aoringo LOG maker Cross-Site Scripting (0.1.3)
WordPress Plugin Team Members Cross-Site Scripting (5.1.0)
Check for apache versions up to 1.3.25, 2.0.38
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2018-1999042)