The vulnerability in ACME mini_httpd 1.30 and prior versions is a denial of service caused by improper handling of HTTP request headers in the handle_request() function. A remote attacker can exploit this flaw by sending crafted HTTP requests that trigger resource exhaustion or crash the server process. The issue is identified as CWE-400, which relates to uncontrolled resource consumption leading to service disruption. No specific exploit code or active exploitation in the wild has been reported. No patch or remediation information is provided in the available data.

Successful exploitation results in denial of service, causing the affected ACME mini_httpd server to become unavailable or unresponsive. There is no impact on confidentiality or integrity reported. The attack requires no privileges and no user interaction, making it relatively easy to attempt remotely.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider limiting exposure of the affected service to untrusted networks or implementing network-level protections to detect and block suspicious HTTP requests targeting the header parser.