Lucene search
Gentoo FoundationGLSA-201701-41HistoryJan 17, 2017 - 12:00 a.m.
MiniUPnPc: Buffer overflow
2017-01-1700:00:00
Gentoo Foundation
security.gentoo.org
42
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.006 Low
EPSS
Percentile
78.6%
Background
UPnP client library and a simple UPnP client.
Description
An out-of-bounds read was discovered in the getHTTPResponse function in miniwget.c in MiniUPnPc.
Impact
Remote attackers, through specially crafted headers, could cause a Denial of Service condition.
Workaround
There is no known workaround at this time.
Resolution
All MiniUPnPc users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/miniupnpc-1.9.20150427"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | net-libs/miniupnpc | < 1.9.20150427 | UNKNOWN |
Related
cve
cve
CVE-2014-3985
2014-09-11 18:55:06
prion
prion
Out-of-bounds
2014-09-11 18:55:00
cvelist
cvelist
CVE-2014-3985
2014-09-11 18:00:00
nessus
nessus
openSUSE Security Update : miniupnpc (openSUSE-SU-2014:0815-1)
2014-06-19 00:00:00
Mandriva Linux Security Advisory : miniupnpc (MDVSA-2014:120)
2014-06-11 00:00:00
Ubuntu 14.04 LTS : MiniUPnPc vulnerability (USN-2280-1)
2014-07-17 00:00:00
ubuntucve
ubuntucve
CVE-2014-3985
2014-06-09 00:00:00
securityvulns
securityvulns
[oss-security] Re: CVE request: possible miniupnpc buffer overflow
2014-06-13 00:00:00
miniupnpc buffer overflow
2014-06-13 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2280-1)
2014-07-21 00:00:00
nvd
nvd
CVE-2014-3985
2014-09-11 18:55:06
ubuntu
ubuntu
MiniUPnPc vulnerability
2014-07-16 00:00:00
debiancve
debiancve
CVE-2014-3985
2014-09-11 18:55:06
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.006 Low
EPSS
Percentile
78.6%
Related for GLSA-201701-41