Use-After-Free Vulnerability in Open Litespeed by LiteSpeed Technologies
CVE-2015-3890

7.5HIGH

Key Information:

Vendor

Litespeedtech

Status
Openlitespeed
Vendor
CVE Published:
20 September 2017

What is CVE-2015-3890?

A use-after-free vulnerability exists in Open Litespeed, an open-source web server. This flaw can allow an attacker to exploit memory management issues, potentially leading to arbitrary code execution. Versions prior to 1.3.10 are particularly susceptible, highlighting the importance of timely updates to maintain server security. To mitigate risks, administrators are strongly advised to upgrade to the latest version and consult available security advisories.

References

http://www.security-assessment.com/files/documents/adviso...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.