CVE-2012-5533

The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite loop) via a request…

published November 24, 2012

CVSS
—
EPSS
12%
Percentile
96.1
In the wild
Unconfirmed
What it is

The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite loop) via a request with a header containing an empty token, as demonstrated using the "Connection: TE,,Keep-Alive" header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12038 · 96.1th percentile
Published
2012-11-24T20:00Z
EPSS history
Timeline
  • 24 NOV 20:00Z
    The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite loop) via a request…
    cvelistv5