Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite loop) via a request with a header containing an empty token, as demonstrated using the "Connection: TE,,Keep-Alive" header.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
lighttpd HTTP头处理拒绝服务漏洞
Vulnerability Description
lighttpd是德国软件开发者Jan Kneschke所研发的一款开源的Web服务器，它的主要特点是仅需少量的内存及CPU资源即可达到同类网页服务器的性能。 lighttpd 1.4.32的request.c中的http_request_split_value函数中存在漏洞。通过发送报头中含有空令牌的请求，如“Connection: TE,,Keep-Alive”报头，远程攻击者可利用该漏洞造成拒绝服务（无线循环）。
CVSS Information
N/A
Vulnerability Type
N/A