Intrusion PreventionLighttpd.mod_wstunnel.DoS
Description
This indicates an attack attempt to exploit a Denial of Service Vulnerability in Lighttpd Project Lighttpd.
This vulnerability is due to insufficient handling of HTTP websocket handshake header requests. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted requests to the target server. Successfully exploiting this vulnerability could result in denial of service and lead to crash.
Affected Products
Lighttpd Project Lighttpd 1.4.63
Lighttpd Project Lighttpd 1.4.64
Lighttpd Project Lighttpd 1.4.65
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://redmine.lighttpd.net/projects/lighttpd/wiki/Release-1_4_66
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 52784 |
| Created | Mar 29, 2023 |
| Updated | Apr 17, 2023 |
| Risk |
|
| CVE ID | CVE-2022-37797 |
| Exploit Prediction Score | 0.2% |
| Default Action | drop |
| Active | |
| Affected OS | Linux |
| Affected App | Other |