miniupnpd_poc

Miniupnpd path 大于 526 字节的 SUBSCRIBE 请求时被触发。 根本原因在于缺少对 snprintf 返回值的验证，因为 snprintf 返回的是它 可能 复制的字节数，而非实际复制的字节数。 截至 2019 年 1 月 25 日，此 repro 中的 PoC 已成功针对 Google Wifi 进行测试。 其他使用 miniupnpd 的设备也可能存在漏洞。 根本原因 upnpevents.c static void upnpeventpreparestruct upnpeventnotify obj obj-buffersize = 1024; / Stat...

Google WiFi Router — Combine Multiple Routers to Boost WiFi Signal

Can you rely on a single loudspeaker in your living room for great sound throughout your home? Nah! In the same way, you can not expect a single WiFi router to provide stable range throughout your home. To solve this issue, Google will soon power your home's wireless internet network with its...