CVE-2013-7039
13.12.2013, 18:55
Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gnu | libmicrohttpd | 𝑥 ≤ 0.9.31 |
| gnu | libmicrohttpd | 0.9.16 |
| gnu | libmicrohttpd | 0.9.17 |
| gnu | libmicrohttpd | 0.9.18 |
| gnu | libmicrohttpd | 0.9.19 |
| gnu | libmicrohttpd | 0.9.20 |
| gnu | libmicrohttpd | 0.9.21 |
| gnu | libmicrohttpd | 0.9.22 |
| gnu | libmicrohttpd | 0.9.23 |
| gnu | libmicrohttpd | 0.9.24 |
| gnu | libmicrohttpd | 0.9.25 |
| gnu | libmicrohttpd | 0.9.26 |
| gnu | libmicrohttpd | 0.9.27 |
| gnu | libmicrohttpd | 0.9.28 |
| gnu | libmicrohttpd | 0.9.29 |
| gnu | libmicrohttpd | 0.9.30 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References