Advisory ROSA-SA-2026-3213

Software: libmicrohttpd 0.9.77 OS: ROSA-CHROME unaffected versions = libmicrohttpd-0.9.77-1 affected versions libmicrohttpd-0.9.77-1 CVE-ID: CVE-2025-59777 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Dereferencing the NULL pointer in GNU libmicrohttpd allows a remote attacker to cause a denial of...

MiracleLinux 8 : libmicrohttpd-0.9.59-3.el8 (AXSA:2023-7100:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-7100:02 advisory. libmicrohttpd: remote DoS CVE-2023-27371 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note that...

MiracleLinux 9 : libmicrohttpd-0.9.72-5.el9 (AXSA:2023-6766:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6766:01 advisory. libmicrohttpd: remote DoS CVE-2023-27371 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note that...

SUSE: Security Advisory (SUSE-SU-2026:20029-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES16 Security Update : libmicrohttpd (SUSE-SU-2026:20029-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20029-1 advisory. - CVE-2025-62689: Fixed heap-based buffer overflow through a specially crafted packet bsc1253178 - CVE-2025-59777: Fixed NULL...

openSUSE 16 Security Update : libmicrohttpd (openSUSE-SU-2026:20016-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20016-1 advisory. - CVE-2025-62689: Fixed heap-based buffer overflow through a specially crafted packet bsc1253178 - CVE-2025-59777: Fixed NULL pointer dereferenc...

Security update for libmicrohttpd (important)

openSUSE security update: security update for libmicrohttpd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20016-1 Rating: important References: bsc1253177 bsc1253178 Cross-References: CVE-2025-59777 CVE-2025-62689 CVSS scores: CVE-2025-59777 SUSE ...

SUSE-SU-2026:20029-1 Security update for libmicrohttpd

This update for libmicrohttpd fixes the following issues: - CVE-2025-62689: Fixed heap-based buffer overflow through a specially crafted packet bsc1253178 - CVE-2025-59777: Fixed NULL pointer dereference through a specially crafted packet bsc1253177...

SUSE-SU-2026:20072-1 Security update for libmicrohttpd

This update for libmicrohttpd fixes the following issues: - CVE-2025-62689: Fixed heap-based buffer overflow through a specially crafted packet bsc1253178 - CVE-2025-59777: Fixed NULL pointer dereference through a specially crafted packet bsc1253177...

OPENSUSE-SU-2026:20016-1 Security update for libmicrohttpd

This update for libmicrohttpd fixes the following issues: - CVE-2025-62689: Fixed heap-based buffer overflow through a specially crafted packet bsc1253178 - CVE-2025-59777: Fixed NULL pointer dereference through a specially crafted packet bsc1253177...

SUSE-SU-2026:20057-1 Security update for libmicrohttpd

This update for libmicrohttpd fixes the following issues: - CVE-2025-59777: Fixed NULL pointer dereference bsc1253177. - CVE-2025-62689: Fixed heap-based buffer overflowbsc1253178...

SUSE-SU-2025:21200-1 Security update for libmicrohttpd

This update for libmicrohttpd fixes the following issues: - CVE-2025-59777: Fixed NULL pointer dereference bsc1253177. - CVE-2025-62689: Fixed heap-based buffer overflowbsc1253178...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libmicrohttpd (SUSE-SU-2025:4291-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4291-1 advisory. - CVE-2025-59777: Fixed NULL pointer dereference via specially crafted packet sent by an attacke...

openSUSE Security Advisory (SUSE-SU-2025:4291-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:4291-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for libmicrohttpd

This update for libmicrohttpd fixes the following issues: CVE-2025-59777: Fixed NULL pointer dereference via specially crafted packet sent by an attacker bsc1253177 CVE-2025-62689: Fixed heap-based buffer overflow via specially crafted packet sent by an attacker bsc1253178 Patch Instructions: To...

SUSE-SU-2025:4291-1 Security update for libmicrohttpd

This update for libmicrohttpd fixes the following issues: - CVE-2025-59777: Fixed NULL pointer dereference via specially crafted packet sent by an attacker bsc1253177 - CVE-2025-62689: Fixed heap-based buffer overflow via specially crafted packet sent by an attacker bsc1253178...

CVE-2025-59777 affecting package libmicrohttpd for versions less than 0.9.77-4

CVE-2025-59777 affecting package libmicrohttpd for versions less than 0.9.77-4. A patched version of the package is available...

CVE-2025-62689 affecting package libmicrohttpd for versions less than 0.9.77-4

CVE-2025-62689 affecting package libmicrohttpd for versions less than 0.9.77-4. A patched version of the package is available...

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.

...