CVE-2013-4560

Description

Use-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial of service (segmentation fault and crash) via unspecified vectors that trigger FAMMonitorDirectory failures.

How to fix CVE-2013-4560

To remediate CVE-2013-4560, upgrade the affected package to a fixed version below.

• Debian/lighttpd—upgrade to 1.4.33-1+nmu1 or later

Is CVE-2013-4560 being exploited?

Moderate — EPSS is 5.1%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (1)

• from 0, < 1.4.33-1+nmu1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2013-4560