rocky

gupnp security update

An update for gupnp is now available for Rocky Linux 8. Rocky Linux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

5.8 CVSS

2021-07-22T03:27:11

mageia

Updated gupnp packages fix a security vulnerability

An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to trick a victim's browser into triggering actions against local UPnP services implemented using this library. Depending on the affected...

5.8 CVSS

2021-07-08T22:43:19

amazon

Important: gupnp

Issue Overview: A flaw was found in gupnp. DNS rebinding can occur when a victim's browser is used by a remote web server to trigger actions against local UPnP services including data exfiltration, data tempering, and other exploits. The highest threat from this vulnerability is to data...

5.8 CVSS

2021-07-01T00:50:00

redhat

(RHSA-2021:2459) Important: gupnp security update

GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible. Security Fix(es): gupnp: allows DNS rebinding which could result in tricking browser into...

5.8 CVSS

2021-06-16T12:39:35

oraclelinux

gupnp security update

[1.0.2-6] + gupnp-1.0.3-3 - Fix DNS rebind issue - Resolves:...

5.8 CVSS

2021-06-15T00:00:00

redhat

(RHSA-2021:2422) Important: gupnp security update

GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible. Security Fix(es): gupnp: allows DNS rebinding which could result in tricking browser into...

5.8 CVSS

2021-06-14T19:00:53

redhat

(RHSA-2021:2417) Important: gupnp security update

GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible. Security Fix(es): gupnp: allows DNS rebinding which could result in tricking browser into...

5.8 CVSS

2021-06-14T18:58:12

oraclelinux

gupnp security update

[1.0.6-2] + gupnp-1.0.6-2 - Fix DNS rebind issue - Resolves:...

5.8 CVSS

2021-06-10T00:00:00

almalinux

Important: gupnp security update

GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible. Security Fix(es): gupnp: allows DNS rebinding which could result in tricking browser into...

5.8 CVSS

2021-06-09T12:54:08

redhat

(RHSA-2021:2363) Important: gupnp security update

GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible. Security Fix(es): gupnp: allows DNS rebinding which could result in tricking browser into...

5.8 CVSS

2021-06-09T12:54:08

ubuntu

GUPnP vulnerability

It was discovered that GUPnP incorrectly filtered local requests. If a user were tricked into visiting a malicious website, a remote attacker could possibly use this issue to perform actions against local UPnP services such as obtaining or altering sensitive...

5.8 CVSS

2021-06-01T00:00:00

archlinux

[ASA-202105-26] gupnp: information disclosure

Arch Linux Security Advisory ASA-202105-26 Severity: Medium Date : 2021-05-25 CVE-ID : CVE-2021-33516 Package : gupnp Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-1985 Summary The package gupnp before version 1.2.6-1 is vulnerable to information...

5.8 CVSS

2021-05-25T00:00:00

oraclelinux

gssdp and gupnp security update

gssdp [1.0.5-1] + gssdp-1.0.5-1 - Update to 1.0.5 - Fix SUBSCRIBE misbehaviour - Resolves: #1861928 gupnp [1.0.6-1] + gupnp-1.0.6-1 - Update to 1.0.6 - Fix SUBSCRIBE misbehaviour - Resolves:...

7.8 CVSS

2021-05-25T00:00:00

debiancve

CVE-2021-33516

An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to trick a victim's browser into triggering actions against local UPnP services implemented using this library. Depending on the affected...

5.8 CVSS

2021-05-24T15:15:00

ubuntucve

CVE-2021-33516

An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to trick a victim's browser into triggering actions against local UPnP services implemented using this library. Depending on the affected...

5.8 CVSS

2021-05-24T00:00:00

redhat

(RHSA-2021:1789) Moderate: gssdp and gupnp security update

GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible. GSSDP implements resource discovery and announcement over SSDP and is part of gUPnP. The...

7.8 CVSS

2021-05-18T06:05:22

almalinux

Moderate: gssdp and gupnp security update

GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible. GSSDP implements resource discovery and announcement over SSDP and is part of gUPnP. The...

7.8 CVSS

2021-05-18T06:05:22

debian

[SECURITY] [DSA 4898-1] wpa security update

Debian Security Advisory DSA-4898-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso April 22, 2021 https://www.debian.org/security/faq Package : wpa CVE ID : CVE-2020-12695 CVE-2021-0326...

7.9 CVSS

2021-04-22T18:52:18

debian

[SECURITY] [DSA 4898-1] wpa security update

Debian Security Advisory DSA-4898-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso April 22, 2021 https://www.debian.org/security/faq Package : wpa CVE ID : CVE-2020-12695 CVE-2021-0326...

7.9 CVSS

2021-04-22T18:52:18

debian

[SECURITY] [DLA 2489-1] minidlna security update

Debian LTS Advisory DLA-2489-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/ Thorsten Alteholz December 10, 2020 https://wiki.debian.org/LTS Package : minidlna Version : 1.1.6+dfsg-1+deb9u1 CVE...

7.8 CVSS

2020-12-10T21:27:37

affectedPackage.packageName:"gupnp"

gupnp security update

Updated gupnp packages fix a security vulnerability

Important: gupnp

(RHSA-2021:2459) Important: gupnp security update

gupnp security update

(RHSA-2021:2422) Important: gupnp security update

(RHSA-2021:2417) Important: gupnp security update

gupnp security update

Important: gupnp security update

(RHSA-2021:2363) Important: gupnp security update

GUPnP vulnerability

[ASA-202105-26] gupnp: information disclosure

gssdp and gupnp security update

CVE-2021-33516

CVE-2021-33516

(RHSA-2021:1789) Moderate: gssdp and gupnp security update

Moderate: gssdp and gupnp security update

[SECURITY] [DSA 4898-1] wpa security update

[SECURITY] [DSA 4898-1] wpa security update

[SECURITY] [DLA 2489-1] minidlna security update