Lucene search
+L

190 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 4:34 a.m.9 views

SUSE CVE-2017-1000494

Uninitialized stack variable vulnerability in NameValueParserEndElt upnpreplyparse.c in miniupnpd 2.0 allows an attacker to cause Denial of Service Segmentation fault and Memory Corruption or possibly have unspecified other impact...

7.8CVSS7.5AI score0.00467EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:00 a.m.16 views

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 allows a hacker to execute arbitrary code.

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 lies in the copying of buffers without checking the size of the input data during the processing of the miniupnpd file. Exploiting this vulnerability could allow a remote attacker to execute...

9.6CVSS8.2AI score0.0124EPSS
SaveExploits1References5
OSV
OSV
added 2022/08/05 10:15 p.m.12 views

CVE-2022-24017

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

9.8CVSS7.8AI score0.0124EPSS
SaveExploits1References1
Prion
Prion
added 2022/08/05 10:15 p.m.28 views

Buffer overflow

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

7.5CVSS9.6AI score0.0124EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/08/05 9:15 p.m.78 views

CVE-2022-24017

TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14 is affected by CVE-2022-24017 due to a buffer overflow in the GetValue functionality (miniupnpd). Talos details show GetValue flows through cfms_mib_proc_handle/GetValue/GetCfmValue; a crafted configuration value can overflow a small destination buffer (0x1...

9.8CVSS9.6AI score0.0124EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/08/05 9:15 p.m.8 views

CVE-2022-24017

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

9.6CVSS9.6AI score0.0124EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/08/05 12:00 a.m.10 views

PT-2022-4678 · Tcl · Tcl Linkhub Mesh Wi-Fi

Name of the Vulnerable Software and Affected Versions: TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14 Description: The issue is related to a buffer overflow vulnerability in the GetValue functionality of the TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14, specifically within the miniupnpd binary. This...

9.8CVSS9.6AI score0.0124EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2022/05/20 11:43 p.m.43 views

CVE-2019-12111

A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in copyIPv6IfDifferent in pcpserver.c...

7.5CVSS2.8AI score0.03404EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2022/05/20 11:10 p.m.35 views

CVE-2019-12110

An AddPortMapping Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in upnpredirect.c...

7.5CVSS2.8AI score0.02381EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2022/05/20 10:30 p.m.34 views

CVE-2019-12108

A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for intport...

7.5CVSS3AI score0.0258EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2020/09/26 12:00 a.m.67 views

Ubuntu 16.04 LTS : MiniUPnPd vulnerabilities (USN-4542-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4542-1 advisory. It was discovered that MiniUPnPd did not properly validate callback addresses. A remote attacker could possibly use this issue to expose sensitive...

7.5CVSS6.3AI score0.03404EPSS
SaveExploits5References6
OpenVAS
OpenVAS
added 2020/09/26 12:00 a.m.31 views

Ubuntu: Security Advisory (USN-4542-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.03404EPSS
SaveExploits5References2
Ubuntu
Ubuntu
added 2020/09/25 3:26 p.m.73 views

USN-4542-1: MiniUPnPd vulnerabilities

It was discovered that MiniUPnPd did not properly validate callback addresses. A remote attacker could possibly use this issue to expose sensitive information. CVE-2019-12107 It was discovered that MiniUPnPd incorrectly handled unpopulated user XML input. An attacker could possibly use this issue...

7.5CVSS6.4AI score0.03404EPSS
SaveExploits5
OSV
OSV
added 2020/09/25 3:26 p.m.10 views

USN-4542-1 miniupnpd vulnerabilities

It was discovered that MiniUPnPd did not properly validate callback addresses. A remote attacker could possibly use this issue to expose sensitive information. CVE-2019-12107 It was discovered that MiniUPnPd incorrectly handled unpopulated user XML input. An attacker could possibly use this issue...

7.5CVSS6.7AI score0.03404EPSS
SaveExploits5References6
Veracode
Veracode
added 2020/09/24 11:07 a.m.30 views

Denial Of Service (DoS)

miniupnpd is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in copyIPv6IfDifferent in pcpserver.c...

7.5CVSS2.6AI score0.03404EPSS
SaveExploits1References4Affected Software2
Veracode
Veracode
added 2020/09/24 11:04 a.m.27 views

Denial Of Service (DoS)

miniupnpd is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for remport...

7.5CVSS2.9AI score0.0258EPSS
SaveExploits1References5Affected Software2
Veracode
Veracode
added 2020/09/24 11:02 a.m.26 views

Denial Of Service (DoS)

miniupnpd is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for intport...

7.5CVSS2.9AI score0.0258EPSS
SaveExploits1References5Affected Software2
OpenVAS
OpenVAS
added 2020/01/09 12:00 a.m.31 views

Fedora Update for miniupnpd FEDORA-2019-0a26e06dd5

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.03404EPSS
SaveExploits1References2
NVD
NVD
added 2019/11/01 12:15 p.m.21 views

CVE-2013-2600

MiniUPnPd has information disclosure use of snprintf...

7.5CVSS7.3AI score0.02335EPSS
SaveExploits1References5
OSV
OSV
added 2019/11/01 12:15 p.m.13 views

DEBIAN-CVE-2013-2600

MiniUPnPd has information disclosure use of snprintf...

7.5CVSS7.3AI score0.02335EPSS
SaveExploits1References1
Rows per page
Query Builder