CVE-2021-3466 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2021-3466 Interim 1 41 2025-02-17T01:01:31Z current 2021-05-30T14:46:46Z 2025-02-17T01:01:31Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2021-3466 A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Only version 0.9.70 is vulnerable. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Point of Service Image Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 libmicrohttpd libmicrohttpd-devel libmicrohttpd10 libmicrohttpd12 libmicrohttpd10 as a component of HPE Helion OpenStack 8 libmicrohttpd as a component of HPE Helion OpenStack 8 libmicrohttpd-devel as a component of SUSE CaaS Platform 4.0 libmicrohttpd12 as a component of SUSE CaaS Platform 4.0 libmicrohttpd as a component of SUSE CaaS Platform 4.0 libmicrohttpd as a component of SUSE Enterprise Storage 6 libmicrohttpd as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libmicrohttpd-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libmicrohttpd12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libmicrohttpd as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libmicrohttpd-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libmicrohttpd12 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libmicrohttpd as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libmicrohttpd12 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libmicrohttpd as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libmicrohttpd-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libmicrohttpd as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libmicrohttpd as a component of SUSE Linux Enterprise Point of Service Image Server 12 SP2 libmicrohttpd10 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libmicrohttpd as a component of SUSE Linux Enterprise Server 12 SP2-BCL libmicrohttpd10 as a component of SUSE Linux Enterprise Server 12 SP2-ESPOS libmicrohttpd as a component of SUSE Linux Enterprise Server 12 SP2-ESPOS libmicrohttpd10 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libmicrohttpd as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libmicrohttpd10 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libmicrohttpd as a component of SUSE Linux Enterprise Server 12 SP3-BCL libmicrohttpd10 as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS libmicrohttpd as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS libmicrohttpd10 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libmicrohttpd as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libmicrohttpd10 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libmicrohttpd as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libmicrohttpd10 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libmicrohttpd as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libmicrohttpd10 as a component of SUSE Linux Enterprise Server 12 SP5 libmicrohttpd as a component of SUSE Linux Enterprise Server 12 SP5 libmicrohttpd-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libmicrohttpd12 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libmicrohttpd as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libmicrohttpd as a component of SUSE Linux Enterprise Server 15-ESPOS libmicrohttpd-devel as a component of SUSE Linux Enterprise Server 15-LTSS libmicrohttpd12 as a component of SUSE Linux Enterprise Server 15-LTSS libmicrohttpd as a component of SUSE Linux Enterprise Server 15-LTSS libmicrohttpd as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 libmicrohttpd as a component of SUSE Linux Enterprise Server Teradata 12 SP3 libmicrohttpd10 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libmicrohttpd as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libmicrohttpd10 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libmicrohttpd as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libmicrohttpd10 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libmicrohttpd as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libmicrohttpd as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libmicrohttpd-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 libmicrohttpd12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libmicrohttpd as a component of SUSE Linux Enterprise Server for SAP Applications 15 libmicrohttpd-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libmicrohttpd12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libmicrohttpd as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libmicrohttpd as a component of SUSE Manager Proxy 4.0 libmicrohttpd as a component of SUSE Manager Retail Branch Server 4.0 libmicrohttpd as a component of SUSE Manager Server 4.0 libmicrohttpd10 as a component of SUSE OpenStack Cloud 7 libmicrohttpd as a component of SUSE OpenStack Cloud 7 libmicrohttpd10 as a component of SUSE OpenStack Cloud 8 libmicrohttpd as a component of SUSE OpenStack Cloud 8 libmicrohttpd10 as a component of SUSE OpenStack Cloud 9 libmicrohttpd as a component of SUSE OpenStack Cloud 9 libmicrohttpd10 as a component of SUSE OpenStack Cloud Crowbar 8 libmicrohttpd as a component of SUSE OpenStack Cloud Crowbar 8 libmicrohttpd10 as a component of SUSE OpenStack Cloud Crowbar 9 libmicrohttpd as a component of SUSE OpenStack Cloud Crowbar 9 A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Only version 0.9.70 is vulnerable. CVE-2021-3466 HPE Helion OpenStack 8:libmicrohttpd HPE Helion OpenStack 8:libmicrohttpd10 SUSE CaaS Platform 4.0:libmicrohttpd SUSE CaaS Platform 4.0:libmicrohttpd-devel SUSE CaaS Platform 4.0:libmicrohttpd12 SUSE Enterprise Storage 6:libmicrohttpd SUSE Linux Enterprise High Performance Computing 12 SP5:libmicrohttpd SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libmicrohttpd SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libmicrohttpd-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libmicrohttpd12 SUSE Linux Enterprise High Performance Computing 15-LTSS:libmicrohttpd SUSE Linux Enterprise High Performance Computing 15-LTSS:libmicrohttpd-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:libmicrohttpd12 SUSE Linux Enterprise Module for Basesystem 15 SP2:libmicrohttpd SUSE Linux Enterprise Module for Basesystem 15 SP2:libmicrohttpd12 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libmicrohttpd SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libmicrohttpd-devel SUSE Linux Enterprise Point of Service Image Server 12 SP2:libmicrohttpd SUSE Linux Enterprise Server 12 SP2-BCL:libmicrohttpd SUSE Linux Enterprise Server 12 SP2-BCL:libmicrohttpd10 SUSE Linux Enterprise Server 12 SP2-ESPOS:libmicrohttpd SUSE Linux Enterprise Server 12 SP2-ESPOS:libmicrohttpd10 SUSE Linux Enterprise Server 12 SP2-LTSS:libmicrohttpd SUSE Linux Enterprise Server 12 SP2-LTSS:libmicrohttpd10 SUSE Linux Enterprise Server 12 SP3-BCL:libmicrohttpd SUSE Linux Enterprise Server 12 SP3-BCL:libmicrohttpd10 SUSE Linux Enterprise Server 12 SP3-ESPOS:libmicrohttpd SUSE Linux Enterprise Server 12 SP3-ESPOS:libmicrohttpd10 SUSE Linux Enterprise Server 12 SP3-LTSS:libmicrohttpd SUSE Linux Enterprise Server 12 SP3-LTSS:libmicrohttpd10 SUSE Linux Enterprise Server 12 SP4-ESPOS:libmicrohttpd SUSE Linux Enterprise Server 12 SP4-ESPOS:libmicrohttpd10 SUSE Linux Enterprise Server 12 SP4-LTSS:libmicrohttpd SUSE Linux Enterprise Server 12 SP4-LTSS:libmicrohttpd10 SUSE Linux Enterprise Server 12 SP5:libmicrohttpd SUSE Linux Enterprise Server 12 SP5:libmicrohttpd10 SUSE Linux Enterprise Server 15 SP1-LTSS:libmicrohttpd SUSE Linux Enterprise Server 15 SP1-LTSS:libmicrohttpd-devel SUSE Linux Enterprise Server 15 SP1-LTSS:libmicrohttpd12 SUSE Linux Enterprise Server 15-ESPOS:libmicrohttpd SUSE Linux Enterprise Server 15-LTSS:libmicrohttpd SUSE Linux Enterprise Server 15-LTSS:libmicrohttpd-devel SUSE Linux Enterprise Server 15-LTSS:libmicrohttpd12 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:libmicrohttpd SUSE Linux Enterprise Server Teradata 12 SP3:libmicrohttpd SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmicrohttpd SUSE Linux Enterprise Server for SAP Applications 12 SP2:libmicrohttpd10 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmicrohttpd SUSE Linux Enterprise Server for SAP Applications 12 SP3:libmicrohttpd10 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmicrohttpd SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmicrohttpd10 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libmicrohttpd SUSE Linux Enterprise Server for SAP Applications 15 SP1:libmicrohttpd SUSE Linux Enterprise Server for SAP Applications 15 SP1:libmicrohttpd-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:libmicrohttpd12 SUSE Linux Enterprise Server for SAP Applications 15:libmicrohttpd SUSE Linux Enterprise Server for SAP Applications 15:libmicrohttpd-devel SUSE Linux Enterprise Server for SAP Applications 15:libmicrohttpd12 SUSE Manager Proxy 4.0:libmicrohttpd SUSE Manager Retail Branch Server 4.0:libmicrohttpd SUSE Manager Server 4.0:libmicrohttpd SUSE OpenStack Cloud 7:libmicrohttpd SUSE OpenStack Cloud 7:libmicrohttpd10 SUSE OpenStack Cloud 8:libmicrohttpd SUSE OpenStack Cloud 8:libmicrohttpd10 SUSE OpenStack Cloud 9:libmicrohttpd SUSE OpenStack Cloud 9:libmicrohttpd10 SUSE OpenStack Cloud Crowbar 8:libmicrohttpd SUSE OpenStack Cloud Crowbar 8:libmicrohttpd10 SUSE OpenStack Cloud Crowbar 9:libmicrohttpd SUSE OpenStack Cloud Crowbar 9:libmicrohttpd10 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H