Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header.

This update for libmicrohttpd fixes the following issues :

  - CVE-2013-7038: The MHD_http_unescape function in     libmicrohttpd might have allowed remote attackers to     obtain sensitive information or cause a denial of     service (crash) via unspecified vectors that trigger an     out-of-bounds read. (bsc#854443)

  - CVE-2013-7039: Stack-based buffer overflow in the     MHD_digest_auth_check function in libmicrohttpd, when     MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large     value, allowed remote attackers to cause a denial of     service (crash) or possibly execute arbitrary code via a     long URI in an authentication header. (bsc#854443)

  - Fixed various bugs found during a 2017 audit, which are     more hardening measures and not security issues.
    (bsc#1041216)

This update was imported from the SUSE:SLE-12:Update update project.

This update for libmicrohttpd fixes the following issues :

  - CVE-2013-7038: The MHD_http_unescape function in     libmicrohttpd might have allowed remote attackers to     obtain sensitive information or cause a denial of     service (crash) via unspecified vectors that trigger an     out-of-bounds read. (bsc#854443)

  - CVE-2013-7039: Stack-based buffer overflow in the     MHD_digest_auth_check function in libmicrohttpd, when     MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large     value, allowed remote attackers to cause a denial of     service (crash) or possibly execute arbitrary code via a     long URI in an authentication header. (bsc#854443)

  - Fixed various bugs found during a 2017 audit, which are     more hardening measures and not security issues.
    (bsc#1041216)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header.

The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.

The remote host is affected by the vulnerability described in GLSA-201402-01 (GNU libmicrohttpd: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in GNU libmicrohttpd.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could execute arbitrary code with the privileges of       the process, cause a Denial of Service condition, or obtain sensitive       information.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
101130	openSUSE Security Update : libmicrohttpd (openSUSE-2017-728)	Nessus	SuSE Local Security Checks	medium
100864	SUSE SLES12 Security Update : libmicrohttpd (SUSE-SU-2017:1576-1)	Nessus	SuSE Local Security Checks	medium
78296	Amazon Linux AMI : libmicrohttpd (ALAS-2014-353)	Nessus	Amazon Linux Local Security Checks	medium
72254	GLSA-201402-01 : GNU libmicrohttpd: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2013-7039

critical

Tenable Plugins

medium

medium

medium

medium