Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-11148

In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request.

Published

2024-12-05T20:15:21.577

Last Modified

2025-09-23T12:22:43.550

Status

Analyzed

Source

9119a7d8-5eab-497f-8521-727c672e3725

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-476
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System openbsd openbsd < 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.3 Yes
Operating System openbsd openbsd 7.4 Yes
Operating System openbsd openbsd 7.4 Yes
Operating System openbsd openbsd 7.4 Yes
Operating System openbsd openbsd 7.4 Yes
Operating System openbsd openbsd 7.4 Yes
Operating System openbsd openbsd 7.4 Yes
References