CVE-2022-30780 PoC — lighttpd 资源管理错误漏洞

Description

Lighttpd CVE-2022-30780 checker

介绍

# CVE-2022-30780 - lighttpd remote denial of service

## Description

Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connection_read_header_more in connections.c has a typo that disrupts use of multiple read operations on large headers.

## Example

```
$ python3 lighttpd_cve_2022_30780_checker.py http://172.17.0.2
[!] Target: http://172.17.0.2 Lighttpd version: 1.4.56 Vulnerable: True
```

## Exploit

https://github.com/p0dalirius/CVE-2022-30780-lighttpd-denial-of-service

## References
 - https://github.com/lighttpd/lighttpd1.4
 - https://nvd.nist.gov/vuln/detail/CVE-2022-30780
 - https://github.com/p0dalirius/CVE-2022-30780-lighttpd-denial-of-service

文件快照

备注