rpm package
suse/libmicrohttpd&distro=SUSE Linux Enterprise Software Development Kit 12 SP2
pkg:rpm/suse/libmicrohttpd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2013-7039 | — | < 0.9.30-5.1 | 0.9.30-5.1 | Dec 13, 2013 | Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an | ||
| CVE-2013-7038 | — | < 0.9.30-5.1 | 0.9.30-5.1 | Dec 13, 2013 | The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read. |
- CVE-2013-7039Dec 13, 2013affected < 0.9.30-5.1fixed 0.9.30-5.1
Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an
- CVE-2013-7038Dec 13, 2013affected < 0.9.30-5.1fixed 0.9.30-5.1
The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.