CVE-2010-0295

lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of…

published February 3, 2010

CVSS
—
EPSS
12%
Percentile
96.1
In the wild
Unconfirmed
What it is

lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service (memory consumption) by breaking a request into small pieces that are sent at a slow rate.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12111 · 96.1th percentile
Published
2010-02-03T19:00Z
EPSS history
Timeline
  • 03 FEB 19:00Z
    lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of…
    cvelistv5