CVE-2013-7038 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2013-7038 Interim 1 37 2025-11-05T05:15:10Z current 2021-05-30T13:16:42Z 2025-11-05T05:15:10Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2013-7038 The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2017-June/002945.html E-Mail link for SUSE-SU-2017:1576-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Tumbleweed libmicrohttpd libmicrohttpd-devel-0.9.30-5.1 libmicrohttpd-devel-0.9.57-1.33 libmicrohttpd-devel-0.9.73-1.3 libmicrohttpd-devel-1.0.1-160000.2.2 libmicrohttpd10 libmicrohttpd10-0.9.30-5.1 libmicrohttpd12-0.9.57-1.33 libmicrohttpd12-0.9.73-1.3 libmicrohttpd12-0.9.77-1.10 libmicrohttpd12-0.9.77-slfo.1.1_1.2 libmicrohttpd12-1.0.1-160000.2.2 libmicrohttpd10-0.9.30-5.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libmicrohttpd12-0.9.57-1.33 as a component of SUSE Linux Enterprise Micro 5.1 libmicrohttpd12-0.9.57-1.33 as a component of SUSE Linux Enterprise Micro 5.2 libmicrohttpd12-0.9.57-1.33 as a component of SUSE Linux Enterprise Micro 5.3 libmicrohttpd12-0.9.57-1.33 as a component of SUSE Linux Enterprise Micro 5.4 libmicrohttpd12-0.9.57-1.33 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libmicrohttpd12-0.9.57-1.33 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libmicrohttpd12-0.9.57-1.33 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libmicrohttpd-devel-0.9.57-1.33 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libmicrohttpd12-0.9.57-1.33 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libmicrohttpd-devel-0.9.57-1.33 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 libmicrohttpd12-0.9.57-1.33 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 libmicrohttpd-devel-0.9.57-1.33 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libmicrohttpd-devel-0.9.57-1.33 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libmicrohttpd-devel-0.9.57-1.33 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libmicrohttpd10-0.9.30-5.1 as a component of SUSE Linux Enterprise Server 12 SP2 libmicrohttpd10-0.9.30-5.1 as a component of SUSE Linux Enterprise Server 12 SP3 libmicrohttpd10-0.9.30-5.1 as a component of SUSE Linux Enterprise Server 12 SP4 libmicrohttpd10-0.9.30-5.1 as a component of SUSE Linux Enterprise Server 12 SP5 libmicrohttpd-devel-1.0.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libmicrohttpd12-1.0.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libmicrohttpd10-0.9.30-5.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libmicrohttpd10-0.9.30-5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libmicrohttpd10-0.9.30-5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libmicrohttpd-devel-0.9.30-5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libmicrohttpd-devel-0.9.30-5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libmicrohttpd-devel-0.9.30-5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libmicrohttpd-devel-0.9.30-5.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libmicrohttpd12-0.9.77-1.10 as a component of SUSE Linux Micro 6.0 libmicrohttpd12-0.9.77-slfo.1.1_1.2 as a component of SUSE Linux Micro 6.1 libmicrohttpd-devel-0.9.73-1.3 as a component of openSUSE Tumbleweed libmicrohttpd12-0.9.73-1.3 as a component of openSUSE Tumbleweed libmicrohttpd10 as a component of HPE Helion OpenStack 8 libmicrohttpd as a component of HPE Helion OpenStack 8 libmicrohttpd as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libmicrohttpd10 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libmicrohttpd as a component of SUSE Linux Enterprise Server 12 SP2-BCL libmicrohttpd10 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libmicrohttpd as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libmicrohttpd10 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libmicrohttpd as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libmicrohttpd10 as a component of SUSE Linux Enterprise Server 12 SP5 libmicrohttpd as a component of SUSE Linux Enterprise Server 12 SP5 libmicrohttpd as a component of SUSE Linux Enterprise Server Teradata 12 SP3 libmicrohttpd10 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libmicrohttpd as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libmicrohttpd as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libmicrohttpd10 as a component of SUSE OpenStack Cloud 8 libmicrohttpd as a component of SUSE OpenStack Cloud 8 libmicrohttpd10 as a component of SUSE OpenStack Cloud 9 libmicrohttpd as a component of SUSE OpenStack Cloud 9 libmicrohttpd10 as a component of SUSE OpenStack Cloud Crowbar 8 libmicrohttpd as a component of SUSE OpenStack Cloud Crowbar 8 libmicrohttpd10 as a component of SUSE OpenStack Cloud Crowbar 9 libmicrohttpd as a component of SUSE OpenStack Cloud Crowbar 9 The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read. CVE-2013-7038 SUSE Linux Enterprise High Performance Computing 12 SP5:libmicrohttpd10-0.9.30-5.1 SUSE Linux Enterprise Micro 5.1:libmicrohttpd12-0.9.57-1.33 SUSE Linux Enterprise Micro 5.2:libmicrohttpd12-0.9.57-1.33 SUSE Linux Enterprise Micro 5.3:libmicrohttpd12-0.9.57-1.33 SUSE Linux Enterprise Micro 5.4:libmicrohttpd12-0.9.57-1.33 SUSE Linux Enterprise Module for Basesystem 15 SP2:libmicrohttpd12-0.9.57-1.33 SUSE Linux Enterprise Module for Basesystem 15 SP3:libmicrohttpd12-0.9.57-1.33 SUSE Linux Enterprise Module for Basesystem 15 SP4:libmicrohttpd12-0.9.57-1.33 SUSE Linux Enterprise Module for Desktop Applications 15:libmicrohttpd-devel-0.9.57-1.33 SUSE Linux Enterprise Module for Desktop Applications 15:libmicrohttpd12-0.9.57-1.33 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libmicrohttpd-devel-0.9.57-1.33 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libmicrohttpd12-0.9.57-1.33 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libmicrohttpd-devel-0.9.57-1.33 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libmicrohttpd-devel-0.9.57-1.33 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libmicrohttpd-devel-0.9.57-1.33 SUSE Linux Enterprise Server 12 SP2:libmicrohttpd10-0.9.30-5.1 SUSE Linux Enterprise Server 12 SP3:libmicrohttpd10-0.9.30-5.1 SUSE Linux Enterprise Server 12 SP4:libmicrohttpd10-0.9.30-5.1 SUSE Linux Enterprise Server 12 SP5:libmicrohttpd10-0.9.30-5.1 SUSE Linux Enterprise Server 16.0:libmicrohttpd-devel-1.0.1-160000.2.2 SUSE Linux Enterprise Server 16.0:libmicrohttpd12-1.0.1-160000.2.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libmicrohttpd10-0.9.30-5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmicrohttpd10-0.9.30-5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmicrohttpd10-0.9.30-5.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libmicrohttpd-devel-0.9.30-5.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libmicrohttpd-devel-0.9.30-5.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libmicrohttpd-devel-0.9.30-5.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libmicrohttpd-devel-0.9.30-5.1 SUSE Linux Micro 6.0:libmicrohttpd12-0.9.77-1.10 SUSE Linux Micro 6.1:libmicrohttpd12-0.9.77-slfo.1.1_1.2 openSUSE Tumbleweed:libmicrohttpd-devel-0.9.73-1.3 openSUSE Tumbleweed:libmicrohttpd12-0.9.73-1.3 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L