Known vulnerabilities in lighttpd (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:lighttpd_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting lighttpd (Debian package) lighttpd (Debian package) is affected by 3 known vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67733 - Missing release of memory after effective lifetime
CVE-2022-41556
CWE-401 Medium
No
No
1.4.59-1+deb11u2 29.09.2022 SB2022092907
SB2022092908
SB2022103103
and 5 more
#VU67731 - NULL Pointer Dereference
CVE-2022-37797
CWE-476 Medium
No
No
1.4.59-1+deb11u2 29.09.2022 SB2022092907
SB2022092908
SB2022103103
and 3 more
#VU59537 - Out-of-bounds read
CVE-2022-22707
CWE-125 Medium
No
No
- 12.01.2022 SB2022011210
SB2022011723
SB2023022865
and 1 more