ID:8459 - Exploit for Resource exhaustion in lighttpd - CVE-2022-30780

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources within the connection_read_header_more() function in connections.c. A remote attacker can trigger resource exhaustion by sending multiple requests with large HTTP headers and perform a denial of service (DoS) attack.

Remediation