There exists use-after-free vulnerabilities in lighttpd <= 1.4.50 request parsing which might read from invalid pointers to memory used in the same request, not from other requests.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "lighttpd", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-dbgsym", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-dev", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-doc", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-gssapi", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-gssapi-dbgsym", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-pam", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-pam-dbgsym", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-sasl", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-sasl-dbgsym", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-cml", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-cml-dbgsym", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-geoip", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-geoip-dbgsym", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-magnet", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-magnet-dbgsym", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-maxminddb", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-maxminddb-dbgsym", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-trigger-b4-dl", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-trigger-b4-dl-dbgsym", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-vhostdb-dbi", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-vhostdb-dbi-dbgsym", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-vhostdb-pgsql", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-vhostdb-pgsql-dbgsym", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-webdav", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-mod-webdav-dbgsym", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-modules-ldap", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-modules-ldap-dbgsym", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-modules-mysql", "binary_version": "1.4.55-1ubuntu1" }, { "binary_name": "lighttpd-modules-mysql-dbgsym", "binary_version": "1.4.55-1ubuntu1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "lighttpd", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-doc", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-authn-gssapi", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-authn-gssapi-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-authn-pam", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-authn-pam-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-authn-sasl", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-authn-sasl-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-deflate", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-deflate-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-geoip", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-geoip-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-maxminddb", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-maxminddb-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-mbedtls", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-mbedtls-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-nss", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-nss-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-openssl", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-openssl-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-trigger-b4-dl", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-trigger-b4-dl-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-vhostdb-pgsql", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-vhostdb-pgsql-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-webdav", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-webdav-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-wolfssl", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-mod-wolfssl-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-modules-dbi", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-modules-dbi-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-modules-ldap", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-modules-ldap-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-modules-lua", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-modules-lua-dbgsym", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-modules-mysql", "binary_version": "1.4.63-1ubuntu3" }, { "binary_name": "lighttpd-modules-mysql-dbgsym", "binary_version": "1.4.63-1ubuntu3" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "lighttpd", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-doc", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-gssapi", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-gssapi-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-pam", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-pam-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-sasl", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-sasl-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-deflate", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-deflate-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-gnutls", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-gnutls-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-maxminddb", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-maxminddb-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-mbedtls", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-mbedtls-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-nss", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-nss-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-openssl", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-openssl-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-vhostdb-pgsql", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-vhostdb-pgsql-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-webdav", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-webdav-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-wolfssl", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-wolfssl-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-dbi", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-dbi-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-ldap", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-ldap-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-lua", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-lua-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-mysql", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-mysql-dbgsym", "binary_version": "1.4.76-1ubuntu1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "lighttpd", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-doc", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-authn-gssapi", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-authn-gssapi-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-authn-pam", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-authn-pam-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-authn-sasl", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-authn-sasl-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-deflate", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-deflate-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-gnutls", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-gnutls-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-maxminddb", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-maxminddb-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-mbedtls", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-mbedtls-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-nss", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-nss-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-openssl", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-openssl-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-vhostdb-pgsql", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-vhostdb-pgsql-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-webdav", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-webdav-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-wolfssl", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-mod-wolfssl-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-modules-dbi", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-modules-dbi-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-modules-ldap", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-modules-ldap-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-modules-lua", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-modules-lua-dbgsym", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-modules-mysql", "binary_version": "1.4.74-1ubuntu3" }, { "binary_name": "lighttpd-modules-mysql-dbgsym", "binary_version": "1.4.74-1ubuntu3" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "lighttpd", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-doc", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-gssapi", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-gssapi-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-pam", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-pam-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-sasl", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-authn-sasl-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-deflate", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-deflate-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-gnutls", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-gnutls-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-maxminddb", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-maxminddb-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-mbedtls", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-mbedtls-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-nss", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-nss-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-openssl", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-openssl-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-vhostdb-pgsql", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-vhostdb-pgsql-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-webdav", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-webdav-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-wolfssl", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-mod-wolfssl-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-dbi", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-dbi-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-ldap", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-ldap-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-lua", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-lua-dbgsym", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-mysql", "binary_version": "1.4.76-1ubuntu1" }, { "binary_name": "lighttpd-modules-mysql-dbgsym", "binary_version": "1.4.76-1ubuntu1" } ] }