VULNERABILITY INTELLIGENCE

CVE-2022-30780

CVSS score7.5 HIGH

EPSS probability57.19%

CISA KEVNot currently listed

Published2022-06-11

Last modified2026-06-17

Description

Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connection_read_header_more in connections.c has a typo that disrupts use of multiple read operations on large headers.