Lucene search

K
mageiaGentoo FoundationMGASA-2018-0250
HistoryMay 19, 2018 - 11:56 p.m.

Updated miniupnpc packages fix security vulnerability

2018-05-1923:56:45
Gentoo Foundation
advisories.mageia.org
13

0.001 Low

EPSS

Percentile

43.5%

It was discovered that miniupnpc contained a heap buffer overflow in parseelt (minixml.c - no CVE assigned). It was discovered that miniupnpc also contained a memory corruption (invalid read, SIGSEGV) in NameValueParserEndElt (upnpreplyparse.c) while handling two consecutive malformed SOAP requests (CVE-2017-1000494).

OSVersionArchitecturePackageVersionFilename
Mageia6noarchminiupnpc< 2.0.20170509-1.1miniupnpc-2.0.20170509-1.1.mga6