OpenBSD 7.4 before errata 006 is vulnerable to NULL dereference in httpd
CVE-2024-11148
7.5HIGH
What is CVE-2024-11148?
The httpd(8) component in OpenBSD versions 7.3 and 7.4 is susceptible to a NULL dereference vulnerability. This flaw emerges when the server processes a malformed fastcgi request, leading to potential server disruptions or crashes. Implementing the latest patches provided in the respective errata is crucial for maintaining the integrity and availability of the service.
Affected Version(s)
OpenBSD 7.4
OpenBSD 7.4 < 7.4 errata 006
OpenBSD 7.3 < 7.3 errata 020