CVE-2013-7038

NameCVE-2013-7038
DescriptionThe MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severitymedium
Debian Bugs731933

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
libmicrohttpd (PTS)stretch0.9.51-1fixed
buster0.9.62-1fixed
bullseye0.9.72-2fixed
bookworm, sid0.9.73-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
libmicrohttpdsource(unstable)0.9.32-1low731933

Notes

[squeeze] - libmicrohttpd <no-dsa> (Minor issue)
[wheezy] - libmicrohttpd <no-dsa> (Minor issue)
https://bugzilla.redhat.com/show_bug.cgi?id=1039384

Search for package or bug name: Reporting problems