CVE-2013-7039

Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header.

🔗 References (14)

• cve@mitrehttp://secunia.com/advisories/55903
• cve@mitrehttp://security.gentoo.org/glsa/glsa-201402-01.xml
• cve@mitrehttp://www.openwall.com/lists/oss-security/2013/12/09/11
• cve@mitrehttp://www.securityfocus.com/bid/64138
• cve@mitrehttps://bugs.gentoo.org/show_bug.cgi?id=493450
• cve@mitrehttps://bugzilla.redhat.com/show_bug.cgi?id=1039390
• cve@mitrehttps://gnunet.org/svn/libmicrohttpd/ChangeLog
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/55903
• af854a3a-2127-422b-91ae-364da2661108http://security.gentoo.org/glsa/glsa-201402-01.xml
• af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2013/12/09/11
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/64138
• af854a3a-2127-422b-91ae-364da2661108https://bugs.gentoo.org/show_bug.cgi?id=493450
• af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=1039390
• af854a3a-2127-422b-91ae-364da2661108https://gnunet.org/svn/libmicrohttpd/ChangeLog