Debian/libmicrohttpd: critical 9.8
A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that
Action: Upgrade libmicrohttpd to 0.9.71-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.71-1 | - |
Fixed versions
| 0.9.71-1 |
Sources
- osv: DEBIAN-CVE-2021-3466#Debian:13/libmicrohttpd
- https://security-tracker.debian.org/tracker/CVE-2021-3466
published · modified · JSON