Lucene search

K
debianDebianDEBIAN:DLA-2315-1:6010C
HistoryAug 06, 2020 - 5:28 p.m.

[SECURITY] [DLA 2315-1] gupnp security update

2020-08-0617:28:11
lists.debian.org
34

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:N/A:C

0.005 Low

EPSS

Percentile

77.3%


Debian LTS Advisory DLA-2315-1 [email protected]
https://www.debian.org/lts/security/ Emilio Pozuelo Monfort
August 06, 2020 https://wiki.debian.org/LTS


Package : gupnp
Version : 1.0.1-1+deb9u1
CVE ID : CVE-2020-12695

Yunus Çadırcı found an issue in the SUBSCRIBE method of UPnP, a
network protocol for devices to automatically discover and communicate
with each other. Insuficient checks on this method allowed attackers
to use vulnerable UPnP services for DoS attacks or possibly to bypass
firewalls.

For Debian 9 stretch, this problem has been fixed in version
1.0.1-1+deb9u1.

We recommend that you upgrade your gupnp packages.

For the detailed security status of gupnp please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/gupnp

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian9allgupnp< 1.0.1-1+deb9u1gupnp_1.0.1-1+deb9u1_all.deb

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:N/A:C

0.005 Low

EPSS

Percentile

77.3%