CVEvulnerability

CVE-2013-7039

5.1 MEDIUM Published 2013-12-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2013-12-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header.

Affected configurations

• gnu libmicrohttpd (<= 0.9.31) • gnu libmicrohttpd 0.9.16 • gnu libmicrohttpd 0.9.17 • gnu libmicrohttpd 0.9.18 • gnu libmicrohttpd 0.9.19 • gnu libmicrohttpd 0.9.20 • gnu libmicrohttpd 0.9.21 • gnu libmicrohttpd 0.9.22 • gnu libmicrohttpd 0.9.23 • gnu libmicrohttpd 0.9.24 • gnu libmicrohttpd 0.9.25 • gnu libmicrohttpd 0.9.26 • gnu libmicrohttpd 0.9.27 • gnu libmicrohttpd 0.9.28 • gnu libmicrohttpd 0.9.29 • gnu libmicrohttpd 0.9.30

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References