270 matches found
miniupnpd_poc
Miniupnpd path that is greater than 526 bytes. The root cause is due to the lack of validating the return value of snprintf since snprintf returns the value of how many bytes it could of copied, not how many bytes it did copy. As of Jan-25-2019 the PoC within this repro has been successfully test...
CLEANSTART-2023-DH12716 Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2
Security vulnerability affects the miniupnpd package. A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2...
CLEANSTART-2023-JX42713 AddPortMapping Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2
Security vulnerability affects the miniupnpd package. An AddPortMapping Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2...
CLEANSTART-2023-JI09021 Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2
Security vulnerability affects the miniupnpd package. A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2...
CLEANSTART-2023-BE20671 Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2
Security vulnerability affects the miniupnpd package. A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2...
CLEANSTART-2023-UX80661 upnp_event_prepare function in upnpevents
Security vulnerability affects the miniupnpd package. The upnpeventprepare function in upnpevents...
FreeBSD : miniupnpd -- Integer underflow in SOAPAction header parsing (43dc274d-f74b-4420-8ef8-d2e108213002)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 43dc274d-f74b-4420-8ef8-d2e108213002 advisory. An integer underflow in the SOAPAction header parsing in ParseHttpHeaders lets a remote attacker trigge...
Exploit for CVE-2026-107159
CVE-2026-107159 MiniUPnPd = 2.3.11 Divide-by-Zero DoS via...
MiniUPnPd 2.3.11 SSDP Divide-By-Zero Denial of Service
MiniUPnPd versions through version 2.3.11 built with --strict contain a divide-by-zero flaw in ProcessSSDPData. The proof of concept sends an SSDP M-SEARCH request with MX: 0 to trigger a denial of service. https://packetstorm.news/download/235380...
CVE-2026-107159
A flaw was found in miniupnpd. An unauthenticated attacker on the adjacent network can exploit this vulnerability to cause a Denial of Service DoS by crashing the service. By sending a specially crafted Simple Service Discovery Protocol SSDP search request with an invalid delay value, the attacke...
CVE-2026-107159
MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...
DEBIAN-CVE-2026-107159
MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...
UBUNTU-CVE-2026-107159
MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...
CVE-2026-107159
MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...
CVE-2026-107159
MiniUPnPd versions through 2.3.11 built with the --strict flag are vulnerable to a divide-by-zero vulnerability in the ProcessSSDPData() function. An unauthenticated attacker on the local network can crash the daemon by sending a single multicast M-SEARCH datagram to port 1900 featuring an MX: 0 ...
CVE-2026-107159 MiniUPnPd through 2.3.11 Divide-by-Zero DoS via SSDP M-SEARCH MX Header
MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...
CVE-2026-107159 MiniUPnPd through 2.3.11 Divide-by-Zero DoS via SSDP M-SEARCH MX Header
MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...
CVE-2026-107159 MiniUPnPd through 2.3.11 Divide-by-Zero DoS via SSDP M-SEARCH MX Header
MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...
CVE-2026-107159
MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...
EUVD-2026-94308
MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...