Caddyserver Caddy 2.5.1

CPE Details

Caddyserver Caddy 2.5.1
caddyserver
caddy
2.5.1
2022-06-09
13h36 +00:00
2022-06-09
16h52 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:caddyserver:caddy:2.5.1:*:*:*:*:*:*:*

Informations

Vendor

caddyserver

Product

caddy

Version

2.5.1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-44487 2023-10-10 00h00 +00:00 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
7.5
High
CVE-2022-34037 2022-07-21 22h00 +00:00 An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) via a crafted URI. Note: This has been disputed as a bug, not a security vulnerability, in the Caddy web server that emerged when an administrator's bad configuration containing a malformed request URI caused the server to return an empty reply instead of a valid HTTP response to the client.
7.5
High