GNU Libmicrohttpd NULL Pointer Dereference Vulnerability Allowing Denial-of-Service

A NULL pointer dereference vulnerability has been identified in GNU Libmicrohttpd versions through 1.0.2. This vulnerability, present in the experimental WebSocket support library 'libmicrohttpd_ws.so', can be exploited by sending a specially crafted packet, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, where the application may crash or become unresponsive.

Remediation

Users are advised to stop using 'libmicrohttpd_ws.so', as it is an experimental implementation. The vulnerability has been fixed in the official GNU Libmicrohttpd Git repository after the v1.0.2 tag.