CVE-2018-19052 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-19052 Interim 1 31 2025-02-17T02:33:31Z current 2021-05-30T14:18:27Z 2025-02-17T02:33:31Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-19052 An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing '/' character, but the alias target filesystem path does have a trailing '/' character. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VOBJZNTYGCVJJSLH5SFMUWQQJH3XPGJW/#VOBJZNTYGCVJJSLH5SFMUWQQJH3XPGJW E-Mail link for openSUSE-SU-2019:2347-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise High Availability Extension 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Package Hub 15 SUSE Package Hub 15 SP1 openSUSE Leap 15.0 openSUSE Leap 15.1 openSUSE Tumbleweed lighttpd lighttpd-1.4.54-bp150.3.3.1 lighttpd-1.4.54-bp151.4.3.1 lighttpd-1.4.54-lp150.2.3.1 lighttpd-1.4.54-lp151.3.3.1 lighttpd-1.4.59-2.1 lighttpd-mod_authn_gssapi-1.4.54-bp150.3.3.1 lighttpd-mod_authn_gssapi-1.4.54-bp151.4.3.1 lighttpd-mod_authn_gssapi-1.4.54-lp150.2.3.1 lighttpd-mod_authn_gssapi-1.4.54-lp151.3.3.1 lighttpd-mod_authn_gssapi-1.4.59-2.1 lighttpd-mod_authn_ldap-1.4.54-bp150.3.3.1 lighttpd-mod_authn_ldap-1.4.54-bp151.4.3.1 lighttpd-mod_authn_ldap-1.4.54-lp150.2.3.1 lighttpd-mod_authn_ldap-1.4.54-lp151.3.3.1 lighttpd-mod_authn_ldap-1.4.59-2.1 lighttpd-mod_authn_mysql-1.4.54-bp150.3.3.1 lighttpd-mod_authn_mysql-1.4.54-bp151.4.3.1 lighttpd-mod_authn_mysql-1.4.54-lp150.2.3.1 lighttpd-mod_authn_mysql-1.4.54-lp151.3.3.1 lighttpd-mod_authn_mysql-1.4.59-2.1 lighttpd-mod_authn_pam-1.4.54-bp150.3.3.1 lighttpd-mod_authn_pam-1.4.54-bp151.4.3.1 lighttpd-mod_authn_pam-1.4.54-lp150.2.3.1 lighttpd-mod_authn_pam-1.4.54-lp151.3.3.1 lighttpd-mod_authn_pam-1.4.59-2.1 lighttpd-mod_authn_sasl-1.4.54-bp150.3.3.1 lighttpd-mod_authn_sasl-1.4.54-bp151.4.3.1 lighttpd-mod_authn_sasl-1.4.54-lp150.2.3.1 lighttpd-mod_authn_sasl-1.4.54-lp151.3.3.1 lighttpd-mod_authn_sasl-1.4.59-2.1 lighttpd-mod_cml-1.4.54-bp150.3.3.1 lighttpd-mod_cml-1.4.54-bp151.4.3.1 lighttpd-mod_cml-1.4.54-lp150.2.3.1 lighttpd-mod_cml-1.4.54-lp151.3.3.1 lighttpd-mod_cml-1.4.59-2.1 lighttpd-mod_geoip-1.4.54-bp150.3.3.1 lighttpd-mod_geoip-1.4.54-bp151.4.3.1 lighttpd-mod_geoip-1.4.54-lp150.2.3.1 lighttpd-mod_geoip-1.4.54-lp151.3.3.1 lighttpd-mod_magnet-1.4.54-bp150.3.3.1 lighttpd-mod_magnet-1.4.54-bp151.4.3.1 lighttpd-mod_magnet-1.4.54-lp150.2.3.1 lighttpd-mod_magnet-1.4.54-lp151.3.3.1 lighttpd-mod_magnet-1.4.59-2.1 lighttpd-mod_maxminddb-1.4.54-bp150.3.3.1 lighttpd-mod_maxminddb-1.4.54-bp151.4.3.1 lighttpd-mod_maxminddb-1.4.54-lp150.2.3.1 lighttpd-mod_maxminddb-1.4.54-lp151.3.3.1 lighttpd-mod_maxminddb-1.4.59-2.1 lighttpd-mod_mysql_vhost-1.4.54-bp150.3.3.1 lighttpd-mod_mysql_vhost-1.4.54-bp151.4.3.1 lighttpd-mod_mysql_vhost-1.4.54-lp150.2.3.1 lighttpd-mod_mysql_vhost-1.4.54-lp151.3.3.1 lighttpd-mod_mysql_vhost-1.4.59-2.1 lighttpd-mod_rrdtool-1.4.54-bp150.3.3.1 lighttpd-mod_rrdtool-1.4.54-bp151.4.3.1 lighttpd-mod_rrdtool-1.4.54-lp150.2.3.1 lighttpd-mod_rrdtool-1.4.54-lp151.3.3.1 lighttpd-mod_rrdtool-1.4.59-2.1 lighttpd-mod_trigger_b4_dl-1.4.54-bp150.3.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-bp151.4.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-lp150.2.3.1 lighttpd-mod_trigger_b4_dl-1.4.54-lp151.3.3.1 lighttpd-mod_trigger_b4_dl-1.4.59-2.1 lighttpd-mod_vhostdb_dbi-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_dbi-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_dbi-1.4.59-2.1 lighttpd-mod_vhostdb_ldap-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_ldap-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_ldap-1.4.59-2.1 lighttpd-mod_vhostdb_mysql-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_mysql-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_mysql-1.4.59-2.1 lighttpd-mod_vhostdb_pgsql-1.4.54-bp150.3.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-bp151.4.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-lp150.2.3.1 lighttpd-mod_vhostdb_pgsql-1.4.54-lp151.3.3.1 lighttpd-mod_vhostdb_pgsql-1.4.59-2.1 lighttpd-mod_webdav-1.4.54-bp150.3.3.1 lighttpd-mod_webdav-1.4.54-bp151.4.3.1 lighttpd-mod_webdav-1.4.54-lp150.2.3.1 lighttpd-mod_webdav-1.4.54-lp151.3.3.1 lighttpd-mod_webdav-1.4.59-2.1 lighttpd-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_authn_gssapi-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_authn_ldap-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_authn_mysql-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_authn_pam-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_authn_sasl-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_cml-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_geoip-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_magnet-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_maxminddb-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_mysql_vhost-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_rrdtool-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_trigger_b4_dl-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_vhostdb_dbi-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_vhostdb_ldap-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_vhostdb_mysql-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_vhostdb_pgsql-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-mod_webdav-1.4.54-bp150.3.3.1 as a component of SUSE Package Hub 15 lighttpd-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_authn_gssapi-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_authn_ldap-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_authn_mysql-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_authn_pam-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_authn_sasl-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_cml-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_geoip-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_magnet-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_maxminddb-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_mysql_vhost-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_rrdtool-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_trigger_b4_dl-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_vhostdb_dbi-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_vhostdb_ldap-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_vhostdb_mysql-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_vhostdb_pgsql-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-mod_webdav-1.4.54-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 lighttpd-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_authn_gssapi-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_authn_ldap-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_authn_mysql-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_authn_pam-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_authn_sasl-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_cml-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_geoip-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_magnet-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_maxminddb-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_mysql_vhost-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_rrdtool-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_trigger_b4_dl-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_vhostdb_dbi-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_vhostdb_ldap-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_vhostdb_mysql-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_vhostdb_pgsql-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-mod_webdav-1.4.54-lp150.2.3.1 as a component of openSUSE Leap 15.0 lighttpd-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_authn_gssapi-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_authn_ldap-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_authn_mysql-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_authn_pam-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_authn_sasl-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_cml-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_geoip-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_magnet-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_maxminddb-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_mysql_vhost-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_rrdtool-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_trigger_b4_dl-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_vhostdb_dbi-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_vhostdb_ldap-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_vhostdb_mysql-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_vhostdb_pgsql-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-mod_webdav-1.4.54-lp151.3.3.1 as a component of openSUSE Leap 15.1 lighttpd-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_authn_gssapi-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_authn_ldap-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_authn_mysql-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_authn_pam-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_authn_sasl-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_cml-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_magnet-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_maxminddb-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_mysql_vhost-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_rrdtool-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_trigger_b4_dl-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_vhostdb_dbi-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_vhostdb_ldap-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_vhostdb_mysql-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_vhostdb_pgsql-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd-mod_webdav-1.4.59-2.1 as a component of openSUSE Tumbleweed lighttpd as a component of SUSE Linux Enterprise High Availability Extension 12 SP4 lighttpd as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing '/' character, but the alias target filesystem path does have a trailing '/' character. CVE-2018-19052 SUSE Package Hub 15:lighttpd-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_authn_gssapi-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_authn_ldap-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_authn_mysql-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_authn_pam-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_authn_sasl-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_cml-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_geoip-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_magnet-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_maxminddb-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_mysql_vhost-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_rrdtool-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_trigger_b4_dl-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_vhostdb_dbi-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_vhostdb_ldap-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_vhostdb_mysql-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_vhostdb_pgsql-1.4.54-bp150.3.3.1 SUSE Package Hub 15:lighttpd-mod_webdav-1.4.54-bp150.3.3.1 SUSE Package Hub 15 SP1:lighttpd-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_authn_gssapi-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_authn_ldap-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_authn_mysql-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_authn_pam-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_authn_sasl-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_cml-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_geoip-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_magnet-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_maxminddb-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_mysql_vhost-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_rrdtool-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_trigger_b4_dl-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_vhostdb_dbi-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_vhostdb_ldap-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_vhostdb_mysql-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_vhostdb_pgsql-1.4.54-bp151.4.3.1 SUSE Package Hub 15 SP1:lighttpd-mod_webdav-1.4.54-bp151.4.3.1 openSUSE Leap 15.0:lighttpd-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_authn_gssapi-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_authn_ldap-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_authn_mysql-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_authn_pam-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_authn_sasl-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_cml-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_geoip-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_magnet-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_maxminddb-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_mysql_vhost-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_rrdtool-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_trigger_b4_dl-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_vhostdb_dbi-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_vhostdb_ldap-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_vhostdb_mysql-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_vhostdb_pgsql-1.4.54-lp150.2.3.1 openSUSE Leap 15.0:lighttpd-mod_webdav-1.4.54-lp150.2.3.1 openSUSE Leap 15.1:lighttpd-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_authn_gssapi-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_authn_ldap-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_authn_mysql-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_authn_pam-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_authn_sasl-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_cml-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_geoip-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_magnet-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_maxminddb-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_mysql_vhost-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_rrdtool-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_trigger_b4_dl-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_vhostdb_dbi-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_vhostdb_ldap-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_vhostdb_mysql-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_vhostdb_pgsql-1.4.54-lp151.3.3.1 openSUSE Leap 15.1:lighttpd-mod_webdav-1.4.54-lp151.3.3.1 openSUSE Tumbleweed:lighttpd-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_authn_gssapi-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_authn_ldap-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_authn_mysql-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_authn_pam-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_authn_sasl-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_cml-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_magnet-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_maxminddb-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_mysql_vhost-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_rrdtool-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_trigger_b4_dl-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_vhostdb_dbi-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_vhostdb_ldap-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_vhostdb_mysql-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_vhostdb_pgsql-1.4.59-2.1 openSUSE Tumbleweed:lighttpd-mod_webdav-1.4.59-2.1 SUSE Linux Enterprise High Availability Extension 12 SP4:lighttpd SUSE Linux Enterprise Server for SAP Applications 12 SP4:lighttpd moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N