CVE-2024-51442

Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf configuration file...

CVE-2024-51442

CVE-2024-51442 affects Minidlna v1.3.3 and earlier. It enables command injection by processing a crafted minidlna.conf, allowing arbitrary OS commands to be executed remotely (network attack, low complexity, no privileges, user interaction required). According to connected NASL/Nessus data, patch...

PT-2024-34636 · Minidlna +1 · Minidlna +1

Name of the Vulnerable Software and Affected Versions: Minidlna versions v1.3.3 and earlier Description: The issue allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf configuration file. This is due to command injection in Minidlna, where an attacker can...

OPENSUSE-SU-2024:14011-1 minidlna-1.3.3-2.1 on GA media

These are all security issues fixed in the minidlna-1.3.3-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11897-1 minidlna-1.3.1-1.1 on GA media

These are all security issues fixed in the minidlna-1.3.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11050-1 minidlna-1.3.0-2.7 on GA media

These are all security issues fixed in the minidlna-1.3.0-2.7 package on the GA media of openSUSE Tumbleweed...

openSUSE 15 Security Update : minidlna (openSUSE-SU-2024:0093-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2024:0093-1 advisory. - ReadyMedia MiniDLNA versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when...

openSUSE Security Advisory (openSUSE-SU-2024:0093-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for minidlna (important)

openSUSE Security Update: Security update for minidlna Announcement ID: openSUSE-SU-2024:0093-1 Rating: important References: 1222007 Cross-References: CVE-2023-33476 CVSS scores: CVE-2023-33476 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP...

OPENSUSE-SU-2024:0093-1 Security update for minidlna

This update for minidlna fixes the following issues: Update to 1.3.3 boo1222007: - Fixed HTTP chunk length parsing. CVE-2023-33476 - Improved Dutch and Swedish translations. - Fixed directory symlink deletion handling...

SUSE CVE-2023-33476

ReadyMedia MiniDLNA versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values that exceed the...

DEBIAN-CVE-2023-47430

Stack-buffer-overflow vulnerability in ReadyMedia MiniDLNA v1.3.3 allows attackers to cause a denial of service via via the SendContainer function at tivocommands.c...

CVE-2023-47430

Stack-buffer-overflow vulnerability in ReadyMedia MiniDLNA v1.3.3 allows attackers to cause a denial of service via via the SendContainer function at tivocommands.c...

CVE-2023-47430

Stack-buffer-overflow vulnerability in ReadyMedia MiniDLNA v1.3.3 allows attackers to cause a denial of service via via the SendContainer function at tivocommands.c...

UBUNTU-CVE-2023-47430

Stack-buffer-overflow vulnerability in ReadyMedia MiniDLNA v1.3.3 allows attackers to cause a denial of service via via the SendContainer function at tivocommands.c...

PT-2024-13450 · Unknown +1 · Readymedia +1

Name of the Vulnerable Software and Affected Versions: ReadyMedia MiniDLNA version 1.3.3 Description: A stack-buffer-overflow issue allows attackers to cause a denial of service via the SendContainer function at tivo commands.c. Recommendations: For ReadyMedia MiniDLNA version 1.3.3, consider...

CVE-2023-47430

CVE-2023-47430 affects ReadyMedia/Minidlna v1.3.3, with a stack-buffer-overflow in the SendContainer() function (tivo_commands.c) that can cause a denial of service. Connected advisories indicate Fedora updates to minidlna in multiple releases (e.g., 1.3.3-13.fc41/42/43) and explicitly reference ...

CVE-2023-47430

Stack-buffer-overflow vulnerability in ReadyMedia MiniDLNA v1.3.3 allows attackers to cause a denial of service via via the SendContainer function at tivocommands.c...

MiniDLNA: Multiple Vulnerabilities

Background MiniDLNA is a simple media server software, with the aim of being fully compliant with DLNA/UPnP-AV clients. Description Multiple vulnerabilities have been discovered in MiniDLNA. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE...

GLSA-202311-12 : MiniDLNA: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202311-12 MiniDLNA: Multiple Vulnerabilities - A DNS rebinding issue in ReadyMedia formerly MiniDLNA before 1.3.1 allows a remote web server to exfiltrate media files. CVE-2022-26505 - ReadyMedia MiniDLNA versions from 1.1.15 up t...