CVE-2019-14323

2019-07-2813:15:10

Google

osv.dev

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

52.4%

JSON

SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte. This results in a crash of the server, but only when strict stack checking is enabled. This is caused by an off-by-one error in ssdp_recv in ssdpd.c.