miniupnp project miniupnpc vulnerabilities and exploits

(subscribe to this query)

NA

Buffer overflow in the IGDstartelt function in igd_desc_parse.c in the MiniUPnP client (aka MiniUPnPc) prior to 1.9.20150917 allows remote UPNP servers to cause a denial of service (application crash) and possibly execute arbitrary code via an "oversized" XML element na...

Miniupnp Project Miniupnpc 1.9 Miniupnp Project Miniupnpc Debian Debian Linux 7.0 Debian Debian Linux 8.0 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 15.04 Opensuse Leap 42.1 Opensuse Opensuse 13.1 Opensuse Opensuse 13.2

9.8

CVSSv3

Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote malicious users to cause a denial of service or possibly have unspecified other impact.

Miniupnp Project Miniupnpd 1.5 Miniupnp Project Miniupnpd 1.8 Miniupnp Project Miniupnpd 1.9 Miniupnp Project Miniupnpd 2.0 Miniupnp Project Miniupnpd 1.4 Miniupnp Project Miniupnpd 1.7

1 EDB exploit1 Github repository

NA

The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote malicious users to cause a denial of service (crash) via crafted headers that trigger an out-of-bounds read.

Miniupnp Project Miniupnp 1.9 Opensuse Opensuse 12.3 Opensuse Opensuse 13.1

7.8

CVSSv3

Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an malicious user to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact

Miniupnp Project Miniupnpd

1 Github repository

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook