194 matches found
CVE-2023-28760
TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...
CVE-2023-28760
TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...
CVE-2023-28760
The TP-Link AX1800 WiFi 6 Router (Archer AX21) is vulnerable to a stack-based buffer overflow in the minidlna-1.1.2/upnpsoap.c component. An unauthenticated attacker on the LAN can exploit an unvalidated db_dir field in the minidlnad service to modify the files.db file. This chain allows for arbi...
CVE-2023-28760: Stack-based Buffer Overflow
TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...
CVE-2023-28760
TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...
Linux Distros Unpatched Vulnerability : CVE-2024-51442
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf configuration...
Linux Distros Unpatched Vulnerability : CVE-2023-47430
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-buffer-overflow vulnerability in ReadyMedia MiniDLNA v1.3.3 allows attackers to cause a denial of service via via the SendContainer function at...
[SECURITY] Fedora 41 Update: minidlna-1.3.3-10.fc41
MiniDLNA aka ReadyDLNA is server software with the aim of being fully compliant with DLNA/UPnP-AV clients. The minidlna daemon serves media files music, pictures, and video to clients on your local network. Example clients include applications such as Totem and XBMC, and devices such as portable...
[SECURITY] Fedora 42 Update: minidlna-1.3.3-13.fc42
MiniDLNA aka ReadyDLNA is server software with the aim of being fully compliant with DLNA/UPnP-AV clients. The minidlna daemon serves media files music, pictures, and video to clients on your local network. Example clients include applications such as Totem and XBMC, and devices such as portable...
Fedora 42 : minidlna (2025-9fb8ee63fb)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-9fb8ee63fb advisory. Avoid restarting minidlna.service when rotating logs if it's not running. Fix CVE-2023-47430 . Tenable has extracted the preceding description block directly...
Fedora: Security Advisory (FEDORA-2025-0f490a9a10)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-9fb8ee63fb)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 41 : minidlna (2025-0f490a9a10)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-0f490a9a10 advisory. Avoid restarting minidlna.service when rotating logs if it's not running. Fix CVE-2023-47430 . Tenable has extracted the preceding description block directly...
Fedora 43 : minidlna (2025-7dbb8de594)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-7dbb8de594 advisory. Automatic update for minidlna-1.3.3-13.fc43. Changelog Mon Jul 7 2025 Dominik Mierzejewski - 1.3.3-13 - use systemctl try-restart in postrotate script resolv...
CVE-2013-2739
MiniDLNA has heap-based buffer overflow...
CVE-2022-43648
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 1.20B03 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MiniDLNA service. The issue results from the lack of prope...
SUSE CVE-2024-51442
Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf configuration file...
CVE-2024-51442
Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf configuration file...
