12 matches found
CVE-2017-8798
CVE-2017-8798 concerns an integer signedness error in the MiniUPnP library (MiniUPnPc) used by miniupnpc. AffectedVersions: v1.4.20101221 through v2.0. Root cause: a signedness/bounds issue in the getHTTPResponse/miniwget path that parses chunked-encoded HTTP responses. Impact: remote attacker co...
CVE-2019-12111
CVE-2019-12111 affects MiniUPnPd (miniupnpd) up to version 2.1, caused by a NULL pointer dereference in copyIPv6IfDifferent in pcpserver.c leading to Denial of Service. Public references in multiple advisories (Debian DLA-1811, Fedora update FEDORA-2019-0a26e06dd5, Ubuntu USN-4542-1) indicate a p...
CVE-2013-2600
CVE-2013-2600 concerns MiniUPnPd, where the vulnerability arises from improper use of snprintf in SSDP response construction. Versions 1.8 and earlier are affected. An attacker can trigger an information disclosure by sending a crafted SSDP request with a long ST header; if the header is long eno...
CVE-2017-1000494
CVE-2017-1000494 affects MiniUPnPd (miniupnpd) versions prior to 2.0, due to an uninitialized stack variable in NameValueParserEndElt (upnpreplyparse.c). This leads to Denial of Service (segmentation fault/memory corruption) and may have other impacts. Public advisories confirm remediation by upg...
CVE-2019-12109
CVE-2019-12109 is a denial-of-service vulnerability in MiniUPnP MiniUPnPd (upnpd) up to version 2.1, caused by a NULL pointer dereference in GetOutboundPinholeTimeout (upnpsoap.c) when handling rem_port. Public references (Ubuntu/Debian advisories and OSS/OSSN notes) confirm the issue and provide...
CVE-2019-12108
CVE-2019-12108 affects MiniUPnPd (miniupnpd) with a NULL pointer dereference in GetOutboundPinholeTimeout (upnpsoap.c for int_port), causing a Denial of Service. Connected sources reference Ubuntu USN-4542-1 and Debian DLA-1811-1 describing vulnerable releases and patches. Affected product: MiniU...
CVE-2019-12106
CVE-2019-12106 affects MiniUPnP MiniSSDPd, specifically the updateDevice function in minissdpd.c for versions 1.4 and 1.5. The vulnerability is a Use-After-Free that allows a remote attacker to crash the process (DoS). Connected sources confirm a resource mismanagement/use-after-free issue in upd...
CVE-2026-5720
The CVE-2026-5720 issue affects the MiniUPnP daemon (miniupnpd). The vulnerability is an integer underflow in SOAPAction header parsing within ParseHttpHeaders(), where improper length validation can cause an underflow to a large unsigned value and an out-of-bounds memchr() read. This can lead to...
CVE-2013-0229
The MiniUPnP MiniUPnPd daemon (versions prior to 1.4 ) is vulnerable to a denial of service (DoS) condition due to a boundary error in the ProcessSSDPRequest function within minissdp.c. A remote attacker can trigger a buffer over-read by sending a specially crafted M-SEARCH request, causing the s...
CVE-2013-0230
A stack-based buffer overflow exists in the ExecuteSoapAction function of the SOAPAction handler within the HTTP service of MiniUPnP 1.0 . The vulnerability is caused by a boundary error when processing SOAPAction HTTP requests, which allows a remote attacker to execute arbitrary code via a long ...
CVE-2013-1461
CVE-2013-0230 affects MiniUPnPd 1.0 and targets the SOAPAction handler in the HTTP service. A stack-based buffer overflow occurs in processing the SOAPAction header, allowing a remote attacker to execute arbitrary code. Exploitation details are documented in public advisories and exploits (e.g., ...