Lucene search
+L

4 matches found

Mageia
Mageia
•added 2020/12/31 2:32 p.m.•60 views

Updated minidlna packages fix security vulnerabilities

It was discovered that minidlna does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue CVE-2020-12695. Minidlna before versions 1.3.0 allows remote code execution...

9.8CVSS7.4AI score0.15193EPSS
SaveExploits4References2
NVD
NVD
•added 2020/11/30 6:15 p.m.•26 views

CVE-2020-28926

ReadyMedia aka MiniDLNA before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove...

9.8CVSS10AI score0.12871EPSS
SaveExploits1References4
OSV
OSV
•added 2020/11/30 6:15 p.m.•15 views

CVE-2020-28926

ReadyMedia aka MiniDLNA before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove...

9.8CVSS9.9AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/30 12:00 a.m.•1 views

CVE-2020-28926: Buffer Copy without Checking Size of Input

ReadyMedia aka MiniDLNA before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove...

9.8CVSS6.4AI score0.12871EPSS
SaveExploits1References2
Rows per page
Query Builder