thttpd
thttpdcounted 2026-10-08 03:20 UTC
As of 2026-10-08, 1 577 hosts ran thttpd with at least one known CVE on a service open at their latest check, across 20 versions with CVEs; 11 distinct CVEs.
Known CVEs on hosts running it
1 577hosts with known CVEs
11distinct CVEs
20versions with CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 76 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Versions with known CVEs
| Version | Hosts with CVEs | CVEs |
|---|---|---|
| 2.25b | 1 060 | 4 |
| 2.19 | 128 | 5 |
| 2.27 | 98 | 1 |
| 2.20c | 78 | 3 |
| 2.22beta4 | 70 | 4 |
| 2.25 | 47 | 1 |
| 2.25b_29dec2003 | 44 | 1 |
| 2.24 | 29 | 2 |
| 2.21b | 15 | 4 |
| 2.04 | 14 | 4 |
| 2.26 | 13 | 1 |
| 2.23beta1 | 8 | 3 |
| 2.27.0 | 5 | 1 |
| 2.20c_21nov01 | 4 | 2 |
| 2.20 | 4 | 3 |
| 2.20b | 3 | 5 |
| 2.25b-re_19jan2004 | 2 | 1 |
| 2.26_14aug2014 | 2 | 1 |
| 2.27_19oct2015 | 1 | 1 |
| 2.25b-lxc_29dec2003 | 1 | 1 |
1 more version was seen only in older observations.
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2017-17663 CRITICAL 9.8 | 1 626 |
| CVE-2006-1078 HIGH 8.4 | 1 060 |
| CVE-2006-1079 HIGH 7.2 | 1 060 |
| CVE-2006-4248 HIGH 7.2 | 1 060 |
| CVE-2001-0892 MEDIUM 5.0 | 316 |
| CVE-2007-0664 MEDIUM 5.0 | 293 |
| CVE-2001-1496 CRITICAL 9.8 | 149 |
| CVE-2000-0900 HIGH 7.5 | 79 |
| CVE-2003-0899 CRITICAL 9.8 | 78 |
| CVE-2005-3124 LOW 2.1 | 15 |
| CVE-2002-0733 HIGH 7.5 | 3 |
Hosts: matches on services open at each host's latest check, over every version.