Debian/lighttpd: unknown

lighttpd before 1.4.14 allows attackers to cause a denial of service (crash) via a request to a file whose mtime is 0, which results in a NULL pointer dereference.

Action: Upgrade lighttpd to 1.4.15-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-1870
• https://security-tracker.debian.org/tracker/CVE-2007-1870

published 2007-04-18T03:19:00Z · modified 2026-10-21T17:47:31.162004980Z · JSON