CVE-2013-4560
Fixed in a distro release EPSS 5%
Use-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial of service (segmentation fault and crash) via unspecified vectors that trigger FAMMonitorDirectory failures.
Products: lighttpd, debian_linux, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | lighttpd | 1.4.33-1+nmu1 |
| Debian 13 | lighttpd | 1.4.33-1+nmu1 |
| Debian 14 | lighttpd | 1.4.33-1+nmu1 |
| Debian 6.0 | lighttpd | 1.4.28-2+squeeze1.4 |
| Debian 7 | lighttpd | 1.4.31-4+deb7u1 |
| openSUSE Tumbleweed | lighttpd | 1.4.37-1.6 |