CVE-2024-11148

Publication date

2024-12-05 19:50:19

Family

cisa-cg

State

PUBLISHED

Description

In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request.