VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Dec 13, 2013· Updated Apr 29, 2026

CVE-2013-7038

CVE-2013-7038

Description

The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.

Affected products

16
  • GNU/Libmicrohttpd16 versions
    cpe:2.3:a:gnu:libmicrohttpd:*:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:a:gnu:libmicrohttpd:*:*:*:*:*:*:*:*range: <=0.9.31
    • cpe:2.3:a:gnu:libmicrohttpd:0.9.16:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:libmicrohttpd:0.9.17:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:libmicrohttpd:0.9.18:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:libmicrohttpd:0.9.19:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:libmicrohttpd:0.9.20:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:libmicrohttpd:0.9.21:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:libmicrohttpd:0.9.22:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:libmicrohttpd:0.9.23:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:libmicrohttpd:0.9.24:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:libmicrohttpd:0.9.25:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:libmicrohttpd:0.9.26:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:libmicrohttpd:0.9.27:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:libmicrohttpd:0.9.28:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:libmicrohttpd:0.9.29:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:libmicrohttpd:0.9.30:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

7

News mentions

0

No linked articles in our index yet.