CVEvulnerability

CVE-2013-7038

6.4 MEDIUM Published 2013-12-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2013-12-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:P
Weaknesses
CWE-119

Description

The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.

Affected configurations

• gnu libmicrohttpd (<= 0.9.31) • gnu libmicrohttpd 0.9.16 • gnu libmicrohttpd 0.9.17 • gnu libmicrohttpd 0.9.18 • gnu libmicrohttpd 0.9.19 • gnu libmicrohttpd 0.9.20 • gnu libmicrohttpd 0.9.21 • gnu libmicrohttpd 0.9.22 • gnu libmicrohttpd 0.9.23 • gnu libmicrohttpd 0.9.24 • gnu libmicrohttpd 0.9.25 • gnu libmicrohttpd 0.9.26 • gnu libmicrohttpd 0.9.27 • gnu libmicrohttpd 0.9.28 • gnu libmicrohttpd 0.9.29 • gnu libmicrohttpd 0.9.30

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References