Description

lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service (memory consumption) by breaking a request into small pieces that are sent at a slow rate.

Remediation

References

CVE-2010-0295

Related Vulnerabilities

WordPress Plugin Advanced Woo Search Unspecified Vulnerability (1.69)

phpList Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-20030)

WordPress Plugin WP App Maker Cross-Site Scripting (1.0.16.4)

MySQL CVE-2018-3133 Vulnerability (CVE-2018-3133)

WordPress Plugin Thrive Optimize Security Bypass (1.4.13.2)

Severity

Medium

Classification

CVE-2010-0295

Tags

Missing Update Known Vulnerabilities