Vulnerabilities for Libmicrohttpd (...) - CXSECURITY.COM

Vulnerabilities for 'Libmicrohttpd'

2021-03-25

CVE-2021-3466

CWE-120

A flaw was found in libmicrohttpd in versions before 0.9.71. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

2013-12-13

CVE-2013-7039

CWE-119

Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header.

CVE-2013-7038

CWE-119

The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.

>>> Vendor: GNU 108 Products

Data display debugger

Realtime linux security module

Libmicrohttpd

Gnutls libtasn1

See all Products for Vendor GNU

Copyright 2024, cxsecurity.com