Lucene search
+L

227 matches found

UbuntuCve
UbuntuCve
•added 2021/03/25 7:15 p.m.•28 views

CVE-2021-3466

A flaw was found in libmicrohttpd. A missing bounds check in the postprocessurlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and...

10CVSS7.3AI score0.08739EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2021/03/25 7:15 p.m.•119 views

CVE-2021-3466

A flaw was found in libmicrohttpd in versions before 0.9.71. A missing bounds check in the postprocessurlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data...

10CVSS5.3AI score0.08739EPSS
SaveExploits0
attackerkb
attackerkb
•added 2021/03/25 7:15 p.m.•10 views

CVE-2021-3466

A flaw was found in libmicrohttpd. A missing bounds check in the postprocessurlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and...

10CVSS7.6AI score0.08739EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2021/03/25 12:00 a.m.•4 views

PT-2021-20628 · Unknown · Libmicrohttpd

Name of the Vulnerable Software and Affected Versions: libmicrohttpd version 0.9.70 Description: A flaw was found in libmicrohttpd, where a missing bounds check in the post process urlencoded function leads to a buffer overflow. This allows a remote attacker to write arbitrary data in an...

10CVSS9.6AI score0.08739EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2021/03/25 12:00 a.m.•71 views

CVE-2021-3466

A flaw was found in libmicrohttpd. A missing bounds check in the postprocessurlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and...

9.7AI score0.08739EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/25 12:00 a.m.•3 views

CVE-2021-3466: Buffer Copy without Checking Size of Input

A flaw was found in libmicrohttpd. A missing bounds check in the postprocessurlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and...

10CVSS6.2AI score0.08739EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/03/25 12:00 a.m.•26 views

libmicrohttpd 缓冲区错误漏洞

GNU libmicrohttpd is a GNU open source application. Run the HTTP server as part of another application. A buffer overflow vulnerability exists in versions of libmicrohttpd prior to 0.9.71, which stems from the fact that a missing bounds check will result in a buffer overflow that can be exploited...

10CVSS6.2AI score0.08739EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2021/03/25 12:00 a.m.•121 views

CVE-2021-3466

A flaw was found in libmicrohttpd. A missing bounds check in the postprocessurlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and...

10CVSS9.5AI score0.08739EPSS
SaveExploits0
CVE
CVE
•added 2021/03/25 12:00 a.m.•361 views

CVE-2021-3466

CVE-2021-3466 affects libmicrohttpd prior to 0.9.71. Root cause: a missing bounds check in post_process_urlencoded can trigger a buffer overflow, allowing a remote attacker to write arbitrary data in apps using libmicrohttpd. Impact per sources: high risk to confidentiality, integrity, and availa...

10CVSS9.3AI score0.08739EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
•added 2021/03/24 6:59 p.m.•29 views

CVE-2021-3466

A flaw was found in libmicrohttpd. A missing bounds check in the postprocessurlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and...

10CVSS3.1AI score0.08739EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2017/06/30 12:00 a.m.•39 views

openSUSE Security Update : libmicrohttpd (openSUSE-2017-728)

This update for libmicrohttpd fixes the following issues : - CVE-2013-7038: The MHDhttpunescape function in libmicrohttpd might have allowed remote attackers to obtain sensitive information or cause a denial of service crash via unspecified vectors that trigger an out-of-bounds read. bsc854443 -...

6.4CVSS7.6AI score0.03277EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2017/06/19 12:00 a.m.•32 views

SUSE SLES12 Security Update : libmicrohttpd (SUSE-SU-2017:1576-1)

This update for libmicrohttpd fixes the following issues : - CVE-2013-7038: The MHDhttpunescape function in libmicrohttpd might have allowed remote attackers to obtain sensitive information or cause a denial of service crash via unspecified vectors that trigger an out-of-bounds read. bsc854443 -...

6.4CVSS7.6AI score0.03277EPSS
SaveExploits0References7
OSV
OSV
•added 2017/06/16 6:46 a.m.•10 views

SUSE-SU-2017:1576-1 Security update for libmicrohttpd

This update for libmicrohttpd fixes the following issues: - CVE-2013-7038: The MHDhttpunescape function in libmicrohttpd might have allowed remote attackers to obtain sensitive information or cause a denial of service crash via unspecified vectors that trigger an out-of-bounds read. bsc854443 -...

6.4CVSS8.6AI score0.03277EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2015/09/29 12:00 a.m.•31 views

Gentoo Security Advisory GLSA 201402-01

Gentoo Linux Local Security Checks GLSA 201402-01 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

6.4CVSS6.6AI score0.03277EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2015/09/08 12:00 a.m.•22 views

Amazon Linux: Security Advisory (ALAS-2014-353)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS6.5AI score0.03277EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2015/04/28 12:00 a.m.•14 views

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality and accessibility of protected information

Multiple vulnerabilities exist in the libmicrohttpd package up to version 0.9.32 of the Gentoo Linux operating system. Exploitation of these vulnerabilities may lead to violations of confidentiality and accessibility of protected information. These vulnerabilities can be exploited remotely...

6.4CVSS6.7AI score0.03277EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2014/10/12 12:00 a.m.•22 views

Amazon Linux AMI : libmicrohttpd (ALAS-2014-353)

Stack-based buffer overflow in the MHDdigestauthcheck function in libmicrohttpd before 0.9.32, when MHDOPTIONCONNECTIONMEMORYLIMIT is set to a large value, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long URI in an authentication header. The...

6.4CVSS7.6AI score0.03277EPSS
SaveExploits0References3
Amazon
Amazon
•added 2014/06/15 12:00 a.m.•45 views

Important: libmicrohttpd

Issue Overview: Stack-based buffer overflow in the MHDdigestauthcheck function in libmicrohttpd before 0.9.32, when MHDOPTIONCONNECTIONMEMORYLIMIT is set to a large value, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long URI in an...

6.4CVSS8.3AI score0.03277EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2014/02/05 12:00 a.m.•15 views

Fedora Update for libmicrohttpd FEDORA-2014-0939

Check for the Version of libmicrohttpd OpenVAS Vulnerability Test Fedora Update for libmicrohttpd FEDORA-2014-0939 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

7.4AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2014/02/05 12:00 a.m.•14 views

Fedora Update for libmicrohttpd FEDORA-2014-0939

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Rows per page
Query Builder