CVE-2012-5533

CVE-2012-5533 describes a denial-of-service vulnerability in lighttpd versions prior to 1.4.32. An attacker can trigger an infinite loop by sending a specially crafted HTTP request header containing an empty token, such as "Connection: TE,,Keep-Alive". This vulnerability has a CVSS score of 5.0, indicating a network-based attack with low complexity and potential for partial availability impact. While not listed on the KEV catalog, a Proof-of-Concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.