Количество 14
Количество 14
BDU:2024-06864
Уязвимость функции MHD_create_post_processor() реализация веб-сервера HTTP libmicrohttpd, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20240904-08
Уязвимость libmicrohttpd
CVE-2023-27371
GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function.
CVE-2023-27371
GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function.
CVE-2023-27371
GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function.
CVE-2023-27371
GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function.
CVE-2023-27371
GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) ...
SUSE-SU-2023:1944-1
Security update for libmicrohttpd
SUSE-SU-2023:1686-1
Security update for libmicrohttpd
RLSA-2023:7090
Moderate: libmicrohttpd security update
RLSA-2023:6566
Moderate: libmicrohttpd security update
GHSA-x2hm-ghg4-c67m
GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function.
ELSA-2023-7090
ELSA-2023-7090: libmicrohttpd security update (MODERATE)
ELSA-2023-6566
ELSA-2023-6566: libmicrohttpd security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-06864 Уязвимость функции MHD_create_post_processor() реализация веб-сервера HTTP libmicrohttpd, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.9 | 1% Низкий | больше 3 лет назад |
 | ROS-20240904-08 Уязвимость libmicrohttpd | CVSS3: 5.9 | 1% Низкий | почти 2 года назад |
 | CVE-2023-27371 GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function. | CVSS3: 5.9 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-27371 GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function. | CVSS3: 5.9 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-27371 GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function. | CVSS3: 5.9 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-27371 GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function. | CVSS3: 5.9 | 1% Низкий | больше 3 лет назад |
| CVE-2023-27371 GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) ... | CVSS3: 5.9 | 1% Низкий | больше 3 лет назад |
 | SUSE-SU-2023:1944-1 Security update for libmicrohttpd | 1% Низкий | больше 3 лет назад | |
| SUSE-SU-2023:1686-1 Security update for libmicrohttpd | 1% Низкий | больше 3 лет назад | |
 | RLSA-2023:7090 Moderate: libmicrohttpd security update | 1% Низкий | около 1 месяца назад | |
| RLSA-2023:6566 Moderate: libmicrohttpd security update | 1% Низкий | около 1 месяца назад | |
| GHSA-x2hm-ghg4-c67m GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function. | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| ELSA-2023-7090 ELSA-2023-7090: libmicrohttpd security update (MODERATE) | 1% Низкий | больше 2 лет назад | |
| ELSA-2023-6566 ELSA-2023-6566: libmicrohttpd security update (MODERATE) | 1% Низкий | больше 2 лет назад |
Уязвимостей на страницу