This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-68005 →
DEBIAN-CVE-2026-68005
An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handle_requ...
Original description
The description as published by the source.
An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handle_request() function
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
mini-httpd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
mini-httpd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
mini-httpd
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30-18"}]}]
References
- advisory security-tracker.debian.org