GNU Libmicrohttpd NULL Pointer Dereference Vulnerability Leading to Denial-of-Service

A NULL pointer dereference vulnerability has been identified in GNU Libmicrohttpd versions through 1.0.2. This vulnerability, present in the experimental WebSocket support library 'libmicrohttpd_ws.so', can be exploited by sending a specially crafted packet, potentially leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition, causing the application to crash or become unresponsive.

Remediation

Users are advised to stop using 'libmicrohttpd_ws.so', as it is an experimental implementation. The vulnerability has been fixed in the official GNU Libmicrohttpd Git repository after the v1.0.2 tag.