There exists use-after-free vulnerabilities in lighttpd <= 1.4.50 request parsing which might read from invalid pointers to memory used in the same request, not from other requests.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-dbgsym" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-dev" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-doc" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-authn-gssapi" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-authn-gssapi-dbgsym" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-authn-pam" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-authn-pam-dbgsym" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-authn-sasl" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-authn-sasl-dbgsym" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-cml" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-cml-dbgsym" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-geoip" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-geoip-dbgsym" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-magnet" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-magnet-dbgsym" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-maxminddb" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-maxminddb-dbgsym" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-trigger-b4-dl" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-trigger-b4-dl-dbgsym" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-vhostdb-dbi" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-vhostdb-dbi-dbgsym" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-vhostdb-pgsql" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-vhostdb-pgsql-dbgsym" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-webdav" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-mod-webdav-dbgsym" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-modules-ldap" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-modules-ldap-dbgsym" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-modules-mysql" }, { "binary_version": "1.4.55-1ubuntu1", "binary_name": "lighttpd-modules-mysql-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-doc" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-authn-gssapi" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-authn-gssapi-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-authn-pam" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-authn-pam-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-authn-sasl" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-authn-sasl-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-deflate" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-deflate-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-geoip" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-geoip-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-maxminddb" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-maxminddb-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-mbedtls" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-mbedtls-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-nss" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-nss-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-openssl" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-openssl-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-trigger-b4-dl" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-trigger-b4-dl-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-vhostdb-pgsql" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-vhostdb-pgsql-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-webdav" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-webdav-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-wolfssl" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-mod-wolfssl-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-modules-dbi" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-modules-dbi-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-modules-ldap" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-modules-ldap-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-modules-lua" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-modules-lua-dbgsym" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-modules-mysql" }, { "binary_version": "1.4.63-1ubuntu3", "binary_name": "lighttpd-modules-mysql-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-doc" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-authn-gssapi" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-authn-gssapi-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-authn-pam" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-authn-pam-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-authn-sasl" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-authn-sasl-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-deflate" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-deflate-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-gnutls" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-gnutls-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-maxminddb" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-maxminddb-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-mbedtls" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-mbedtls-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-nss" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-nss-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-openssl" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-openssl-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-vhostdb-pgsql" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-vhostdb-pgsql-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-webdav" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-webdav-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-wolfssl" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-wolfssl-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-dbi" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-dbi-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-ldap" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-ldap-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-lua" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-lua-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-mysql" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-mysql-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-doc" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-authn-gssapi" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-authn-gssapi-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-authn-pam" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-authn-pam-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-authn-sasl" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-authn-sasl-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-deflate" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-deflate-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-gnutls" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-gnutls-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-maxminddb" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-maxminddb-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-mbedtls" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-mbedtls-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-nss" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-nss-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-openssl" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-openssl-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-vhostdb-pgsql" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-vhostdb-pgsql-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-webdav" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-webdav-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-wolfssl" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-mod-wolfssl-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-modules-dbi" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-modules-dbi-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-modules-ldap" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-modules-ldap-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-modules-lua" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-modules-lua-dbgsym" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-modules-mysql" }, { "binary_version": "1.4.74-1ubuntu3", "binary_name": "lighttpd-modules-mysql-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-doc" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-authn-gssapi" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-authn-gssapi-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-authn-pam" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-authn-pam-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-authn-sasl" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-authn-sasl-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-deflate" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-deflate-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-gnutls" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-gnutls-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-maxminddb" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-maxminddb-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-mbedtls" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-mbedtls-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-nss" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-nss-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-openssl" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-openssl-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-vhostdb-pgsql" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-vhostdb-pgsql-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-webdav" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-webdav-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-wolfssl" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-mod-wolfssl-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-dbi" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-dbi-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-ldap" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-ldap-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-lua" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-lua-dbgsym" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-mysql" }, { "binary_version": "1.4.76-1ubuntu1", "binary_name": "lighttpd-modules-mysql-dbgsym" } ] }