{"id":"CVE-2023-27371","revision":"2895f4b03d584b0f9d4990b0c110b024","records":[{"revision":"2895f4b03d584b0f9d4990b0c110b024","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2023-27371","aliases":[],"title":"GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious …","description":"GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function.","state":0,"publishedAt":"2023-02-28T00:00:00+00:00","modifiedAt":"2026-10-14T22:32:11.173+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"n/a\",\n                    \"product\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"version\": \"n/a\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N","score":5.9,"severity":"MEDIUM"}],"references":["https://git.gnunet.org/libmicrohttpd.git/commit/?id=6d6846e20bfdf4b3eb1b592c97520a532f724238","https://github.com/0xhebi/CVEs/tree/main/GNU%20Libmicrohttpd","https://lists.gnu.org/archive/html/libmicrohttpd/2023-02/msg00000.html","https://lists.debian.org/debian-lts-announce/2023/03/msg00029.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-27371","license":"CVE Program Terms of Use","key":"cve-program:CVE-2023-27371","identifiers":["CVE-2023-27371"]},"retained":false,"historicalAffected":[]}],"coverage":[]}