Known vulnerabilities in lighttpd-mod_authn_gssapi

Vendor: openEuler
Software: lighttpd-mod_authn_gssapi
Software CPE: cpe:2.3:o:openeuler:lighttpd-mod_authn_gssapi:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting lighttpd-mod_authn_gssapi lighttpd-mod_authn_gssapi is affected by 4 known vulnerabilities: 4 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114025 - Resource exhaustion
CVE-2025-8671		 CWE-400 Medium
Available
No
 1.4.67-2, 1.4.72-2 13.08.2025 SB2025081377
SB2025090592
SB2025090593
and 13 more
#VU67733 - Missing release of memory after effective lifetime
CVE-2022-41556		 CWE-401 Medium
No
No
 1.4.67-1 29.09.2022 SB2022092907
SB2022092908
SB2022103103
and 5 more
#VU67731 - NULL Pointer Dereference
CVE-2022-37797		 CWE-476 Medium
No
No
 1.4.67-1 29.09.2022 SB2022092907
SB2022092908
SB2022103103
and 3 more
#VU59537 - Out-of-bounds read
CVE-2022-22707		 CWE-125 Medium
No
No
 1.4.53-2 12.01.2022 SB2022011210
SB2022011723
SB2023022865
and 1 more