Lucene search

K
archlinuxArch LinuxASA-201510-11
HistoryOct 18, 2015 - 12:00 a.m.

miniupnpc: arbitrary code execution

2015-10-1800:00:00
Arch Linux
lists.archlinux.org
16

0.004 Low

EPSS

Percentile

73.0%

An exploitable buffer overflow vulnerability exists in the XML parser
functionality of the MiniUPnP library. A specially crafted XML response
can lead to a buffer overflow on the stack resulting in remote code
execution. An attacker can set up a server on the local network to
trigger this vulnerability.

OSVersionArchitecturePackageVersionFilename
anyanyanyminiupnpc< 1.9.20151008-1UNKNOWN