Security Advisory

CVE-2024-11148

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-12-05 19:50:19
Last updated 2024-12-06 18:58:45
Assigner cisa-cg
CVSS score 7.5
State PUBLISHED

Description

In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request.