CVE-2013-7038
published 2013-12-13CVE-2013-7038: The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash)…
PriorityP423medium6.4CVSS 2.0
AVNACLAuNCPINAP
EPSS
1.82%
76.4th percentile
The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libmicrohttpd | < libmicrohttpd 0.9.32-1 (bookworm) | libmicrohttpd 0.9.32-1 (bookworm) |
| gnu | libmicrohttpd | <= 0.9.31 | — |
| gnu | libmicrohttpd | — | — |
| gnu | libmicrohttpd | — | — |
| gnu | libmicrohttpd | — | — |
| gnu | libmicrohttpd | — | — |
| gnu | libmicrohttpd | — | — |
| gnu | libmicrohttpd | — | — |
| gnu | libmicrohttpd | — | — |
| gnu | libmicrohttpd | — | — |
| gnu | libmicrohttpd | — | — |
| gnu | libmicrohttpd | — | — |
| gnu | libmicrohttpd | — | — |
| gnu | libmicrohttpd | — | — |
| gnu | libmicrohttpd | — | — |
| gnu | libmicrohttpd | — | — |
| gnu | libmicrohttpd | — | — |
| gnu | libmicrohttpd | >= 0 < 0.9.32-1 | 0.9.32-1 |
| gnu | libmicrohttpd | >= 0 < 0.9.32-1 | 0.9.32-1 |
| gnu | libmicrohttpd | >= 0 < 0.9.32-1 | 0.9.32-1 |
| gnu | libmicrohttpd | >= 0 < 0.9.32-1 | 0.9.32-1 |
CVSS provenance
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:P
osv6.4MEDIUM
vendor_debian6.4LOW
vendor_redhat6.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-q6qf-jwgr-5477: The MHD_http_unescape function in libmicrohttpd before 0
ghsa_unreviewed·2022-05-17
CVE-2013-7038 [MEDIUM] CWE-119 GHSA-q6qf-jwgr-5477: The MHD_http_unescape function in libmicrohttpd before 0
The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.
OSV
CVE-2013-7038: The MHD_http_unescape function in libmicrohttpd before 0
osv·2013-12-13·CVSS 6.4
CVE-2013-7038 [MEDIUM] CVE-2013-7038: The MHD_http_unescape function in libmicrohttpd before 0
The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.
Red Hat
libmicrohttpd: out-of-bounds read in MHD_http_unescape()
vendor_redhat·2013-11-28·CVSS 6.4
CVE-2013-7038 [MEDIUM] CWE-125 libmicrohttpd: out-of-bounds read in MHD_http_unescape()
libmicrohttpd: out-of-bounds read in MHD_http_unescape()
The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.
Package: libmicrohttpd (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2013-7038: libmicrohttpd - The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote...
vendor_debian·2013·CVSS 6.4
CVE-2013-7038 [MEDIUM] CVE-2013-7038: libmicrohttpd - The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote...
The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read.
Scope: local
bookworm: resolved (fixed in 0.9.32-1)
bullseye: resolved (fixed in 0.9.32-1)
forky: resolved (fixed in 0.9.32-1)
sid: resolved (fixed in 0.9.32-1)
trixie: resolved (fixed in 0.9.32-1)
No detection rules found.
No public exploits indexed.
http://secunia.com/advisories/55903http://security.gentoo.org/glsa/glsa-201402-01.xmlhttp://www.openwall.com/lists/oss-security/2013/12/09/11http://www.securityfocus.com/bid/64138https://bugs.gentoo.org/show_bug.cgi?id=493450https://bugzilla.redhat.com/show_bug.cgi?id=1039384https://gnunet.org/svn/libmicrohttpd/ChangeLoghttp://secunia.com/advisories/55903http://security.gentoo.org/glsa/glsa-201402-01.xmlhttp://www.openwall.com/lists/oss-security/2013/12/09/11http://www.securityfocus.com/bid/64138https://bugs.gentoo.org/show_bug.cgi?id=493450https://bugzilla.redhat.com/show_bug.cgi?id=1039384https://gnunet.org/svn/libmicrohttpd/ChangeLog
2013-12-13
Published