Lucene search
PRIOn knowledge basePRION:CVE-2016-8863HistoryMar 07, 2017 - 4:59 p.m.
Heap overflow
2017-03-0716:59:00
PRIOn knowledge base
www.prio-n.com
4
Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a valid URI followed by an invalid one in the CALLBACK header of an SUBSCRIBE request.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 8.0 | |
| libupnp | le | 1.6.20 |
Related
openvas
openvas
Debian: Security Advisory (DLA-747-1)
2023-03-08 00:00:00
Debian: Security Advisory (DLA-748-1)
2023-03-08 00:00:00
Mageia: Security Advisory (MGASA-2017-0002)
2022-01-28 00:00:00
nessus
nessus
Debian DLA-747-1 : libupnp security update
2016-12-20 00:00:00
Debian DLA-748-1 : libupnp4 security update
2016-12-20 00:00:00
Fedora 24 : libupnp (2017-3bd0b2e2c0)
2017-03-14 00:00:00
mageia
mageia
Updated libupnp packages fix security vulnerability
2017-01-04 01:05:03
debian
debian
[SECURITY] [DLA 748-1] libupnp4 security update
2016-12-16 21:36:35
[SECURITY] [DLA 747-1] libupnp security update
2016-12-16 21:12:29
[SECURITY] [DSA 3736-1] libupnp security update
2016-12-16 13:01:43
debiancve
debiancve
CVE-2016-8863
2017-03-07 16:59:00
osv
osv
libupnp4 - security update
2016-12-16 00:00:00
CVE-2016-8863
2017-03-07 16:59:01
libupnp - security update
2016-12-16 00:00:00
cve
cve
CVE-2016-8863
2017-03-07 16:59:01
cvelist
cvelist
CVE-2016-8863
2017-03-07 16:00:00
nvd
nvd
CVE-2016-8863
2017-03-07 16:59:01
ubuntucve
ubuntucve
CVE-2016-8863
2017-03-07 00:00:00
ubuntu
ubuntu
libupnp vulnerabilities
2021-03-15 00:00:00
gentoo
gentoo
libupnp: Multiple vulnerabilities
2017-01-23 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: libupnp-1.6.21-1.fc24
2017-03-13 23:53:43
[SECURITY] Fedora 25 Update: libupnp-1.6.21-1.fc25
2017-03-10 15:24:08
[SECURITY] Fedora 26 Update: libupnp-1.6.21-1.fc26
2017-04-01 17:42:11
freebsd
freebsd
upnp -- multiple vulnerabilities
2016-02-23 00:00:00