Stack-based Buffer Overflow in Lighttpd Affects mod_extforward Plugin

CVE-2022-22707

What is CVE-2022-22707?

The mod_extforward plugin of Lighttpd versions 1.4.46 to 1.4.63 contains a stack-based buffer overflow vulnerability that may lead to a remote denial of service. The flaw arises from the improper handling of the Forwarded header in non-default configurations, making systems particularly vulnerable if they operate on 32-bit architecture. Successful exploitation could cause the daemon to crash, resulting in service interruptions. Users are advised to review their configurations and apply available patches to mitigate this risk.

References