CVE-2007-3947

request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by sending an HTTP request with duplicate headers, as…

published July 24, 2007

CVSS
—
EPSS
8%
Percentile
94.8
In the wild
Unconfirmed
What it is

request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by sending an HTTP request with duplicate headers, as demonstrated by a request containing two Location header lines, which results in a segmentation fault.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08072 · 94.8th percentile
Published
2007-07-24T00:00Z
EPSS history
Timeline
  • 24 JUL 00:00Z
    request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by sending an HTTP request with duplicate headers, as…
    cvelistv5