CVE-2014-3985

CVE-2014-3985 affects the MiniUPnP library (MiniUPnPc/MiniUPnP 1.9) via the function getHTTPResponse in miniwget.c . A crafted header can trigger an out-of-bounds read, allowing remote attackers to cause a denial of service (crash). Multiple sources confirm the impact as a remote DoS and point to...