Description

lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service (memory consumption) by breaking a request into small pieces that are sent at a slow rate.

Remediation

References

CVE-2010-0295

Related Vulnerabilities

WordPress Plugin Greg's High Performance SEO Cross-Site Scripting (1.6.1)

Family Connections Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-3419)

XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-7290)

WordPress Plugin Acunetix Secure WordPress Cross-Site Scripting (3.0.3)

WordPress Plugin OptionTree PHP Object Injection (2.6.0)

Severity

Medium

Classification

CVE-2010-0295

Tags

Missing Update Known Vulnerabilities