Lucene search

K
osvGoogleOSV:USN-4794-1
HistoryMar 15, 2021 - 9:15 p.m.

libupnp vulnerabilities

2021-03-1521:15:46
Google
osv.dev
8

7.4 High

AI Score

Confidence

High

0.035 Low

EPSS

Percentile

91.6%

Matthew Garrett discovered that libupnp mishandled POST requests by
default. An attacker could use this vulnerability to write files to
arbitrary locations in the victim’s filesystem, possibly as root.
(CVE-2016-6255)

It was discovered that libupnp mishandled certain input. A remote attacker
could use this vulnerability to cause a denial of service (crash) or
possibly execute arbitrary code. (CVE-2016-8863)