CVE-2022-37797

CVE-2022-37797

In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.

Source: CVE-2022-37797

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다