漏洞描述
In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.
是否受影响判断
判断方法：yum info PackageName
结果说明：版本小于修复版本，则受此漏洞影响，版本大于等于修复版本，则此漏洞已修复。