Lucene search
+L

3 matches found

Mageia
Mageia
added 2020/12/31 2:32 p.m.52 views

Updated minidlna packages fix security vulnerabilities

It was discovered that minidlna does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue CVE-2020-12695. Minidlna before versions 1.3.0 allows remote code execution...

9.8CVSS1.5AI score0.15193EPSS
SaveExploits4References2
OSV
OSV
added 2020/11/30 6:15 p.m.10 views

CVE-2020-28926

ReadyMedia aka MiniDLNA before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove...

9.8CVSS9.9AI score
SaveExploits0References4
NVD
NVD
added 2020/11/30 6:15 p.m.19 views

CVE-2020-28926

ReadyMedia aka MiniDLNA before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove...

9.8CVSS10AI score0.14458EPSS
SaveExploits1References4
Rows per page
Query Builder