CVE-2013-7039: Buffer Overflow
A stack overflow flaw was found in the MHDdigestauthcheck() function in libmicrohttpd. If MHDOPTIONCONNECTIONMEMORYLIMIT was configured to allow large allocations, a remote attacker could possibly use this flaw to cause an application using libmicrohttpd to crash or, potentially, execute arbitrary code with the privileges of the user running the application. This issue has been resolved in version 0.9.32.
References: https://gnunet.org/svn/libmicrohttpd/ChangeLog http://secunia.com/advisories/55903/ https://bugs.gentoo.org/showbug.cgi?id=493450
Acknowledgements:
This issue was discovered by Florian Weimer of the Red Hat Product Security Team.
Other sources
Stack-based buffer overflow in the MHDdigestauthcheck function in libmicrohttpd before 0.9.32, when MHDOPTIONCONNECTIONMEMORYLIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
libmicrohttpdto a version that resolves this vulnerability.Fixed in 0.9.32
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7039?
CVE-2013-7039 has a medium severity level due to its potential to cause application crashes or arbitrary code execution.
How do I fix CVE-2013-7039?
To fix CVE-2013-7039, update libmicrohttpd to version 0.9.31 or later.
What is affected by CVE-2013-7039?
CVE-2013-7039 affects versions of libmicrohttpd up to and including 0.9.30.
Can CVE-2013-7039 be exploited remotely?
Yes, CVE-2013-7039 can be exploited remotely by attackers sending specially crafted requests.
Is there a workaround for CVE-2013-7039?
A potential workaround for CVE-2013-7039 is to restrict the MHD_OPTION_CONNECTION_MEMORY_LIMIT configuration.