Lucene search

K
mageiaGentoo FoundationMGASA-2021-0321
HistoryJul 09, 2021 - 1:43 a.m.

Updated gupnp packages fix a security vulnerability

2021-07-0901:43:19
Gentoo Foundation
advisories.mageia.org
13

0.002 Low

EPSS

Percentile

52.4%

An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to trick a victim’s browser into triggering actions against local UPnP services implemented using this library. Depending on the affected service, this could be used for data exfiltration, data tempering, etc. (CVE-2021-33516)

OSVersionArchitecturePackageVersionFilename
Mageia7noarchgupnp< 1.2.3-1.1gupnp-1.2.3-1.1.mga7
Mageia8noarchgupnp< 1.2.4-1.1gupnp-1.2.4-1.1.mga8