CVE-2022-30780 PoC — lighttpd 资源管理错误漏洞

Source

Associated Vulnerability

Description

Lighttpd CVE-2022-30780 checker

Readme

# CVE-2022-30780 - lighttpd remote denial of service

## Description

Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connection_read_header_more in connections.c has a typo that disrupts use of multiple read operations on large headers.

## Example

```
$ python3 lighttpd_cve_2022_30780_checker.py http://172.17.0.2
[!] Target: http://172.17.0.2 Lighttpd version: 1.4.56 Vulnerable: True
```

## Exploit

https://github.com/p0dalirius/CVE-2022-30780-lighttpd-denial-of-service

## References
 - https://github.com/lighttpd/lighttpd1.4
 - https://nvd.nist.gov/vuln/detail/CVE-2022-30780
 - https://github.com/p0dalirius/CVE-2022-30780-lighttpd-denial-of-service

File Snapshot

 [4.0K]  /data/pocs/d2af1796ea3c13b42a1708cf371be1b0db6c60f5
├── [1.0K]  lighttpd_cve_2022_30780_checker.py
└── [ 750]  README.md

0 directories, 2 files

Remarks