Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-11148

No fix known EPSS <1%CVSS 7.5

In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request.

Published 2024-12-05 · CVE record · OSV

Products: openbsd