• info
• discussion
• exploit
• solution
• references

Lighttpd Duplicate Request Header Denial of Service Vulnerability

The 'lighttpd' program is prone to a remote denial-of-service vulnerability because it fails to handle exceptional conditions.

Successfully exploiting this issue will allow attackers to cause the affected computer to leak memory, eventually denying service to legitimate users.

Versions prior to lighttpd 1.4.20 are vulnerable.