CVE-2013-7039: GNU Libmicrohttpd

Medium severity, CVSS 5.1. EPSS: 3.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header.

Affected products

• GNU Libmicrohttpd: up to and including 0.9.31; version 0.9.16 only; version 0.9.17 only; version 0.9.18 only; version 0.9.19 only; version 0.9.20 only; …

Published 2013-12-13. Last modified 2026-06-17.