Astra Linux – vulnerability in wpa, pupnp-1.8

The Open Connectivity Foundation UPnP specification prior to 2020-04-17 does not prohibit accepting a subscription request containing a delivery URL located on a network segment different from the fully qualified event-subscription URL; this is known as the CallStranger issue...