libupnp project libupnp vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server part of pupnp (libupnp) appears to be vulnerable to DNS rebinding attacks because it does not check the value of the `Host` header. This can be mitigated by using...

Pupnp Project Pupnp

9.8

CVSSv3

Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) prior to 1.6.21 allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a valid URI followed by an invalid one in ...

Libupnp Project Libupnp Debian Debian Linux 8.0

1 Github repository

7.5

CVSSv3

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function. ixmlNode_free() will release a child node recursively, which will consume stack space and lead to a crash.

Pupnp Project Pupnp

7.5

CVSSv3

Portable UPnP SDK (aka libupnp) 1.12.1 and previous versions allows remote malicious users to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/service_ta...

Libupnp Project Libupnp Debian Debian Linux 8.0

7.5

CVSSv3

Portable UPnP SDK (aka libupnp) prior to 1.6.21 allows remote malicious users to write to arbitrary files in the webroot via a POST request without a registered handler.

Debian Debian Linux 8.0 Libupnp Project Libupnp

1 EDB exploit1 Github repository

NA

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote malicious users to execute arbitrary code via a long DeviceType...

Portable Sdk For Upnp Project Portable Sdk For Upnp 1.3.1

1 EDB exploit

NA

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote malicious users to execute arbitrary code via a long UDN (aka u...

Portable Sdk For Upnp Project Portable Sdk For Upnp 1.3.1

1 EDB exploit

NA

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote malicious users to execute arbitrary code via a long ServiceTyp...

Portable Sdk For Upnp Project Portable Sdk For Upnp 1.3.1

1 EDB exploit

NA

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote malicious users to execute arbitrary code via a long DeviceType...

Portable Sdk For Upnp Project Portable Sdk For Upnp 1.3.1

1 EDB exploit

NA

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) prior to 1.6.18 allows remote malicious users to execute arbitrary code via a UDP p...

1 EDB exploit1 Github repository

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook