miniupnpd_poc

Miniupnpd path that is greater than 526 bytes. The root cause is due to the lack of validating the return value of snprintf since snprintf returns the value of how many bytes it could of copied, not how many bytes it did copy. As of Jan-25-2019 the PoC within this repro has been successfully test...

PT-2019-12644 · Miniupnp +1 · Miniupnpd +1

Name of the Vulnerable Software and Affected Versions: MiniUPnPd versions prior to 2.1 Description: The issue allows a remote attacker to leak information from the heap due to improper validation of an snprintf return value in the upnp event prepare function. Recommendations: For versions prior t...