CVE-2013-4560

Use-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial of service (segmentation fault and crash) via unspecified vectors that trigger FAMMonitorDirectory failures.

• CWE-416

• http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2013_03.txtVendor Advisory
• http://jvn.jp/en/jp/JVN37417423/index.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00049.htmlMailing List, Third Party Advisory
• http://marc.info/?l=bugtraq&m=141576815022399&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/55682Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/11/12/4Mailing List, Third Party Advisory
• https://www.debian.org/security/2013/dsa-2795Third Party Advisory
• http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2013_03.txtVendor Advisory
• http://jvn.jp/en/jp/JVN37417423/index.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00049.htmlMailing List, Third Party Advisory
• http://marc.info/?l=bugtraq&m=141576815022399&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/55682Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/11/12/4Mailing List, Third Party Advisory
• https://www.debian.org/security/2013/dsa-2795Third Party Advisory

Published

Nov 20, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4554Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly …
• CVE-2013-4555Cross-site request forgery (CSRF) vulnerability in ecrire/ac…
• CVE-2013-4556Cross-site scripting (XSS) vulnerability in the author page …
• CVE-2013-4557The Security Screen (_core_/securite/ecran_securite.php) bef…
• CVE-2013-4558The get_parent_resource function in repos.c in mod_dav_svn A…
• CVE-2013-4559lighttpd before 1.4.33 does not check the return value of th…
• CVE-2013-4561In a openshift node, there is a cron job to update mcollecti…9.1
• CVE-2013-4562The omniauth-facebook gem 1.4.1 before 1.5.0 does not proper…
• CVE-2013-4563The udp6_ufo_fragment function in net/ipv6/udp_offload.c in …
• CVE-2013-4564Libreswan 3.6 allows remote attackers to cause a denial of s…
• CVE-2013-4565Heap-based buffer overflow in the __OLEdecode function in pp…
• CVE-2013-4566mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to no…