Stack-Based Buffer Overflow in libmicrohttpd Affects Remote Authentication

CVE-2013-7039

Summary

A stack-based buffer overflow vulnerability exists in the MHD_digest_auth_check function of libmicrohttpd prior to version 0.9.32. This flaw is triggered when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to an excessively large value, leading to the potential for remote attackers to exploit it by sending a crafted long URI in an authentication header. Consequently, this could result in a denial of service by crashing the application or potentially allowing unauthorized remote code execution.

References