CPE Details
GNU libmicrohttpd 0.9.25
0.9.25
2013-12-16
18h03 +00:00
18h03 +00:00
2013-12-16
18h14 +00:00
18h14 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:gnu:libmicrohttpd:0.9.25:*:*:*:*:*:*:*
Informations
Vendor
gnuProduct
libmicrohttpdVersion
0.9.25Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function. | 5.9 |
Medium |
||
| The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read. | 6.4 |
|||
| Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header. | 5.1 |
