CVE-2023-27371
libmicrohttpd: remote DoS
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function.
An out-of-bounds flaw was found in GNU's libmicrohttpd due to improper parsing of a multipart/form-data boundary in the MHD_create_post_processor() method in postprocessor.c. This flaw allows an attacker to remotely send a malicious HTTP POST packet that includes one or more ‘\0’ bytes in a multipart/form-data boundary field, which, assuming a specific heap layout, will result in an out-of-bounds read and a crash in the find_boundary() function, causing a denial of service.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2023-02-28 CVE Reserved
- 2023-02-28 CVE Published
- 2024-08-02 CVE Updated
- 2024-08-02 First Exploit
- 2024-10-19 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-125: Out-of-bounds Read
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| https://lists.debian.org/debian-lts-announce/2023/03/msg00029.html | Mailing List |
|
| https://lists.gnu.org/archive/html/libmicrohttpd/2023-02/msg00000.html | Mailing List |
| URL | Date | SRC |
|---|---|---|
| https://github.com/0xhebi/CVEs/tree/main/GNU%20Libmicrohttpd | 2024-08-02 |
| URL | Date | SRC |
|---|---|---|
| https://git.gnunet.org/libmicrohttpd.git/commit/?id=6d6846e20bfdf4b3eb1b592c97520a532f724238 | 2023-03-31 |
| URL | Date | SRC |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2023-27371 | 2024-03-05 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2174313 | 2024-03-05 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Gnu Search vendor "Gnu" | Libmicrohttpd Search vendor "Gnu" for product "Libmicrohttpd" | < 0.9.76 Search vendor "Gnu" for product "Libmicrohttpd" and version " < 0.9.76" | - |
Affected
| ||||||