Denial of Service Vulnerability in Lighttpd Web Server by Lighttpd

CVE-2010-0295

What is CVE-2010-0295?

Lighttpd, a popular open-source web server, is susceptible to a denial of service attack due to its faulty buffer allocation mechanism. When handling requests, Lighttpd allocates a buffer for each read operation. This design flaw allows malicious remote attackers to exploit the server by fragmenting a request into smaller parts and sending them at a slow rate. Consequently, this can lead to excessive memory consumption, rendering the server unresponsive and potentially causing service downtime. Administrators are urged to update to secure versions to mitigate this risk.

References