CVE-2013-7039: Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_...

Security readout for executives and security teams

CVE-2013-7039 is a memory corruption bug in libmicrohttpd before 0.9.32. A remote attacker could crash an affected service and may be able to run code, but only under specific configuration conditions involving digest authentication and a large connection memory limit. Exposure is most likely in applications embedding libmicrohttpd before 0.9.32, using MHD_digest_auth_check, and setting a large MHD_OPTION_CONNECTION_MEMORY_LIMIT. Publicly reachable services using digest authentication deserve priority review. The bundle does not identify affected downstream products. Prioritize remediation where libmicrohttpd is embedded in internet-facing services. The business risk is service outage, with possible code execution not fully evidenced in the provided sources. Internal-only or non-digest-auth deployments are lower urgency but still need inventory validation. Mitigation focus: Upgrade libmicrohttpd to 0.9.32 or later where supported.; Check vendor advisories for distro-specific fixed packages.; Review services using MHD_digest_auth_check and digest authentication..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.