Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-11148

OpenBSD httpd(8) null dereference

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisa-cg

Description

In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenBSD OpenBSD

Default version status: affected

  • 7.4 to < 7.4 errata 006affected
  • 7.4 errata 006unaffected
  • 7.3 to < 7.3 errata 020affected
  • 7.3 errata 020unaffected

References