lighttpd CVE-2013-4560 Use-After-Free Remote Denial of Service Vulnerability
BID:63686
Info
lighttpd CVE-2013-4560 Use-After-Free Remote Denial of Service Vulnerability
| Bugtraq ID: | 63686 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2013-4560 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 12 2013 12:00AM |
| Updated: | Apr 13 2015 10:17PM |
| Credit: | clang static analyzer |
| Vulnerable: |
SuSE SUSE Linux Enterprise Software Development Kit 11 SP3 SuSE SUSE Linux Enterprise High Availability Extension 11 SP3 SuSE SUSE Linux Enterprise High Availability Extension 11 SP2 SuSE Linux Enterprise Software Development Kit 11 SP2 S.u.S.E. openSUSE 13.1 S.u.S.E. openSUSE 12.3 S.u.S.E. openSUSE 12.2 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 lighttpd lighttpd 1.4.32 lighttpd lighttpd 1.4.31 lighttpd lighttpd 1.4.30 lighttpd lighttpd 1.4.26 lighttpd lighttpd 1.4.25 lighttpd lighttpd 1.4.24 lighttpd lighttpd 1.4.23 lighttpd lighttpd 1.4.20 lighttpd lighttpd 1.4.19 lighttpd lighttpd 1.4.18 lighttpd lighttpd 1.4.17 lighttpd lighttpd 1.4.16 lighttpd lighttpd 1.4.15 lighttpd lighttpd 1.4.14 lighttpd lighttpd 1.4.13 lighttpd lighttpd 1.4.12 lighttpd lighttpd 1.4.11 lighttpd lighttpd 1.4.10 lighttpd lighttpd 1.4.2 lighttpd lighttpd 1.4.10a HP vCAS 14.06 (RDA 8.1) HP vCAS 0 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
HP vCAS 14.10-38402 |
Discussion
lighttpd CVE-2013-4560 Use-After-Free Remote Denial of Service Vulnerability
lighttpd is prone to a remote denial-of-service vulnerability.
Successful exploits may allow the attacker to cause the application to crash, resulting in denial-of-service conditions.
lighttpd is prone to a remote denial-of-service vulnerability.
Successful exploits may allow the attacker to cause the application to crash, resulting in denial-of-service conditions.
Solution / Fix
lighttpd CVE-2013-4560 Use-After-Free Remote Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
-
Mandriva lighttpd-1.4.30-6.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lighttpd-mod_auth-1.4.30-6.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lighttpd-mod_cml-1.4.30-6.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lighttpd-mod_compress-1.4.30-6.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lighttpd-mod_magnet-1.4.30-6.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lighttpd-mod_mysql_vhost-1.4.30-6.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lighttpd-mod_trigger_b4_dl-1.4.30-6.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lighttpd-mod_webdav-1.4.30-6.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/