FKIE_CVE-2013-7039

Vulnerability from fkie_nvd - Published: 2013-12-13 18:55 - Updated: 2025-04-11 00:51
Severity ?
Summary
Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header.
References
cve@mitre.orghttp://secunia.com/advisories/55903Vendor Advisory
cve@mitre.orghttp://security.gentoo.org/glsa/glsa-201402-01.xml
cve@mitre.orghttp://www.openwall.com/lists/oss-security/2013/12/09/11
cve@mitre.orghttp://www.securityfocus.com/bid/64138
cve@mitre.orghttps://bugs.gentoo.org/show_bug.cgi?id=493450
cve@mitre.orghttps://bugzilla.redhat.com/show_bug.cgi?id=1039390
cve@mitre.orghttps://gnunet.org/svn/libmicrohttpd/ChangeLog
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/55903Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://security.gentoo.org/glsa/glsa-201402-01.xml
af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2013/12/09/11
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/64138
af854a3a-2127-422b-91ae-364da2661108https://bugs.gentoo.org/show_bug.cgi?id=493450
af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=1039390
af854a3a-2127-422b-91ae-364da2661108https://gnunet.org/svn/libmicrohttpd/ChangeLog
Impacted products
Vendor Product Version
gnu libmicrohttpd *
gnu libmicrohttpd 0.9.16
gnu libmicrohttpd 0.9.17
gnu libmicrohttpd 0.9.18
gnu libmicrohttpd 0.9.19
gnu libmicrohttpd 0.9.20
gnu libmicrohttpd 0.9.21
gnu libmicrohttpd 0.9.22
gnu libmicrohttpd 0.9.23
gnu libmicrohttpd 0.9.24
gnu libmicrohttpd 0.9.25
gnu libmicrohttpd 0.9.26
gnu libmicrohttpd 0.9.27
gnu libmicrohttpd 0.9.28
gnu libmicrohttpd 0.9.29
gnu libmicrohttpd 0.9.30
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB3F576D-E209-4442-84A0-F5720C0670B9",
              "versionEndIncluding": "0.9.31",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:0.9.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "79204833-B005-4AEA-86FF-51DCC291C68D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:0.9.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "6946AFC5-A1ED-4804-B0D5-FD954D299EDF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:0.9.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0899B1B-7E70-41A5-B73E-BA1DBA2320C0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:0.9.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "3BA9A39A-8223-495B-9A8E-653221E679A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:0.9.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "2288EFBB-0EAC-464A-90C0-890D4493A9B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:0.9.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "2893E9E6-986B-422F-BBE6-CD6B07A50B9D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:0.9.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE6F1BC7-9ED0-4654-9C44-325DCEEF83AF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:0.9.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "89AE4C2E-74F1-4ECA-A45D-6F4C5E3BA652",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:0.9.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "63A81F22-4EA6-4316-AE28-622249DC2501",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:0.9.25:*:*:*:*:*:*:*",
              "matchCriteriaId": "EACB49FA-01C7-468E-A008-9E1B0CFCDF03",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:0.9.26:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3DD84B3-E569-4F0D-85AE-5E503C3974A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:0.9.27:*:*:*:*:*:*:*",
              "matchCriteriaId": "26F1581D-19AC-4D63-AEC4-EFBB591C8C34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:0.9.28:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB70D1A6-65E1-49E0-88C0-8D57B1EF09C7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:0.9.29:*:*:*:*:*:*:*",
              "matchCriteriaId": "362BC925-46F3-40B5-A430-C6766FA8999B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:libmicrohttpd:0.9.30:*:*:*:*:*:*:*",
              "matchCriteriaId": "33116DFB-667F-4494-970F-DF713AEC9466",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer basado en pila en la funci\u00f3n MHD_digest_auth_check en libmicrohttpd anterior a  0.9.32, cuando MHD_OPTION_CONNECTION_MEMORY_LIMIT se establece en un valor grande, lo que permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda) o posibilitar  ejecutar c\u00f3digo arbitrario a trav\u00e9s de una  URI muy larga en  una cabecera de autenticaci\u00f3n"
    }
  ],
  "id": "CVE-2013-7039",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.1,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 4.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2013-12-13T18:55:05.787",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/55903"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-201402-01.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.openwall.com/lists/oss-security/2013/12/09/11"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/64138"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=493450"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1039390"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://gnunet.org/svn/libmicrohttpd/ChangeLog"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/55903"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-201402-01.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2013/12/09/11"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/64138"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=493450"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1039390"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://gnunet.org/svn/libmicrohttpd/ChangeLog"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.