Libmicrohttpd
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:libmicrohttpd:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Libmicrohttpd (8286632e-1dea-53a2-a68e-82729f90f295) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libmicrohttpd |
purl2cpe | 2026-06-01 10:11:53.291832 |
pkg:deb/ubuntu/libmicrohttpd |
purl2cpe | 2026-06-01 10:11:53.291834 |
pkg:github/karlson2k/libmicrohttpd |
purl2cpe | 2026-06-01 10:11:53.291835 |
pkg:gitlab/kalilinux/libmicrohttpd |
purl2cpe | 2026-06-01 10:11:53.291836 |
pkg:gitlab/redhat/libmicrohttpd |
purl2cpe | 2026-06-01 10:11:53.291838 |
pkg:gnu/libmicrohttpd |
purl2cpe | 2026-06-01 10:11:53.291839 |
pkg:rpm/centos/libmicrohttpd |
purl2cpe | 2026-06-01 10:11:53.291841 |
pkg:rpm/fedora/libmicrohttpd |
purl2cpe | 2026-06-01 10:11:53.291842 |
pkg:rpm/opensuse/libmicrohttpd |
purl2cpe | 2026-06-01 10:11:53.291843 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-62689 |
vulnerable | 2026-06-08 07:39:16.471391 |
Details available
HIGH (7.5)
NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.
Published: 2025-11-10T04:10:57.970Z
Updated: 2025-11-14T18:01:56.011Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59777 |
vulnerable | 2026-06-08 07:35:23.085664 |
Details available
HIGH (7.5)
NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.
Published: 2025-11-10T04:10:44.836Z
Updated: 2025-11-10T21:41:04.217Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27371 |
vulnerable | 2026-06-08 05:57:40.992949 |
Details available
MEDIUM (5.9)
GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function.
Published: 2023-02-28T00:00:00.000Z
Updated: 2025-03-11T15:19:04.055Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7039 |
vulnerable | 2026-06-08 05:05:08.118695 |
Details available
Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header.
Published: 2013-12-13T17:00:00.000Z
Updated: 2024-08-06T17:53:46.065Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7038 |
vulnerable | 2026-06-08 05:05:08.110472 |
Details available
The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.
Published: 2013-12-13T17:00:00.000Z
Updated: 2024-08-06T17:53:46.072Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.