Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2780-1
HistoryOct 20, 2015 - 12:00 a.m.

MiniUPnP vulnerability

2015-10-2000:00:00
ubuntu.com
37

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.0%

JSON

Releases

  • Ubuntu 15.04
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • miniupnpc - UPnP IGD client lightweight library

Details

Aleksandar Nikolic discovered a buffer overflow vulnerability in the
XML parser functionality of the MiniUPnP library. A remote attacker
could use this to cause a denial of service (application crash) or
possibly execute arbitrary code with privileges of the user running
an application that uses the MiniUPnP library.

OSVersionArchitecturePackageVersionFilename
Ubuntu15.04noarchlibminiupnpc10< 1.9.20140610-2ubuntu1.1UNKNOWN
Ubuntu15.04noarchlibminiupnpc-dev< 1.9.20140610-2ubuntu1.1UNKNOWN
Ubuntu15.04noarchlibminiupnpc10-dbgsym< 1.9.20140610-2ubuntu1.1UNKNOWN
Ubuntu15.04noarchminiupnpc< 1.9.20140610-2ubuntu1.1UNKNOWN
Ubuntu15.04noarchminiupnpc-dbgsym< 1.9.20140610-2ubuntu1.1UNKNOWN
Ubuntu15.04noarchpython-miniupnpc< 1.9.20140610-2ubuntu1.1UNKNOWN
Ubuntu15.04noarchpython-miniupnpc-dbgsym< 1.9.20140610-2ubuntu1.1UNKNOWN
Ubuntu14.04noarchlibminiupnpc8< 1.6-3ubuntu2.14.04.2UNKNOWN
Ubuntu14.04noarchlibminiupnpc-dev< 1.6-3ubuntu2.14.04.2UNKNOWN
Ubuntu14.04noarchminiupnpc< 1.6-3ubuntu2.14.04.2UNKNOWN
Rows per page:
1-10 of 151

Related

gentoo 1
nessus 6
debian 2
cvelist 1
openvas 5
ubuntu 1
ubuntucve 1
mageia 1
threatpost 1
prion 1
archlinux 1
securityvulns 2
debiancve 1
talos 1
cve 1
freebsd 1
nvd 1
gentoo
gentoo
MiniUPnPc: Arbitrary code execution
2018-01-07 00:00:00
nessus
nessus
GLSA-201801-08 : MiniUPnPc: Arbitrary code execution
2018-01-08 00:00:00
FreeBSD : miniupnpc -- buffer overflow (06fefd2f-728f-11e5-a371-14dae9d210b8)
2015-10-15 00:00:00
openSUSE Security Update : miniupnpc (openSUSE-2015-789)
2015-11-23 00:00:00
debian
debian
[SECURITY] [DSA 3379-1] miniupnpc security update
2015-10-25 12:38:19
[SECURITY] [DSA 3379-1] miniupnpc security update
2015-10-25 12:38:19
cvelist
cvelist
CVE-2015-6031
2015-11-02 19:00:00
openvas
openvas
Debian Security Advisory DSA 3379-1 (miniupnpc - security update)
2015-10-25 00:00:00
Ubuntu: Security Advisory (USN-2780-1)
2015-10-21 00:00:00
Debian: Security Advisory (DSA-3379-1)
2015-10-24 00:00:00
ubuntu
ubuntu
MiniUPnP vulnerability
2015-10-23 00:00:00
ubuntucve
ubuntucve
CVE-2015-6031
2015-10-16 00:00:00
mageia
mageia
Updated miniupnpc package fixes security vulnerability
2015-10-30 23:11:10
threatpost
threatpost
Cisco MiniUPnP Stack Smashing Protection Attack
2016-01-27 11:00:28
prion
prion
Buffer overflow
2015-11-02 19:59:00
archlinux
archlinux
miniupnpc: arbitrary code execution
2015-10-18 00:00:00
securityvulns
securityvulns
[USN-2780-2] MiniUPnP vulnerability
2015-10-25 00:00:00
MiniUPnP library buffer overflow
2015-10-25 00:00:00
debiancve
debiancve
CVE-2015-6031
2015-11-02 19:59:14
talos
talos
MiniUPnP Internet Gateway Device Protocol XML Parser Buffer Overflow
2015-09-15 00:00:00
cve
cve
CVE-2015-6031
2015-11-02 19:59:14
freebsd
freebsd
miniupnpc -- buffer overflow
2015-09-15 00:00:00
nvd
nvd
CVE-2015-6031
2015-11-02 19:59:14

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.0%

JSON
Related for USN-2780-1
gentoo1nessus6debian2cvelist1openvas5ubuntu1ubuntucve1mageia1threatpost1prion1archlinux1securityvulns2debiancve1talos1cve1freebsd1nvd1