Moderate: libmicrohttpd security update
Summary
ALSA-2023:6566: Moderate: libmicrohttpd security update. Affects libmicrohttpd versions < 1:0.9.72-5.el9. Fixed in 1:0.9.72-5.el9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
GNU libmicrohttpd is a small C library that allows running an HTTP server as part of another application. It provides an easy way to incorporate HTTP server functionality into various software applications.
Vulnerability Detail
The vulnerability in libmicrohttpd is a remote Denial of Service (DoS) issue. An attacker can exploit this vulnerability to cause a DoS condition on the affected server. The specific CVE identifier for this vulnerability is CVE-2023-27371.
How To Fix
Minimum fixed version
1:0.9.72-5.el9
This is the first release that contains the fix.
sudo dnf update libmicrohttpdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is advised to apply the security update as soon as possible.
Conclusion
In conclusion, the libmicrohttpd package is affected by a moderate-level DoS vulnerability. To mitigate this issue, it is crucial to update the package to the recommended version. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libmicrohttpd →
FAQ
libmicrohttpd is a C library that enables running an HTTP server as part of another application.
The vulnerability allows an attacker to cause a Denial of Service condition on the affected server.
To fix this vulnerability, update the libmicrohttpd package to version 1:0.9.72-5.el9 or later.
There is no known workaround for this vulnerability. Applying the security update is the recommended solution.
You can find more information about this vulnerability in the CVE page linked in the References section.
Related vulnerabilities
Recent vulnerabilities recorded for libmicrohttpd.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
