Vulnerabilities > GNU > Libmicrohttpd > 0.9.23

DATE CVE VULNERABILITY TITLE RISK
2023-02-28 CVE-2023-27371 Out-of-bounds Read vulnerability in GNU Libmicrohttpd
GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method.
network
high complexity
gnu CWE-125
5.9
2013-12-13 CVE-2013-7039 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in GNU Libmicrohttpd
Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header.
network
high complexity
gnu CWE-119
5.1
2013-12-13 CVE-2013-7038 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in GNU Libmicrohttpd
The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.
network
low complexity
gnu CWE-119
6.4