Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2015-6031
HistoryOct 16, 2015 - 12:00 a.m.

CVE-2015-6031

2015-10-1600:00:00
ubuntu.com
ubuntu.com
6

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.0%

JSON

Buffer overflow in the IGDstartelt function in igd_desc_parse.c in the
MiniUPnP client (aka MiniUPnPc) before 1.9.20150917 allows remote UPNP
servers to cause a denial of service (application crash) and possibly
execute arbitrary code via an “oversized” XML element name.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchminiupnpc< 1.6-3ubuntu1.2UNKNOWN
ubuntu14.04noarchminiupnpc< 1.6-3ubuntu2.14.04.2UNKNOWN
ubuntu15.04noarchminiupnpc< 1.9.20140610-2ubuntu1.1UNKNOWN
ubuntu15.10noarchminiupnpc< 1.9.20140610-2ubuntu2UNKNOWN

Related

gentoo 1
nessus 6
debian 2
cvelist 1
archlinux 1
threatpost 1
prion 1
openvas 5
securityvulns 2
debiancve 1
talos 1
cve 1
freebsd 1
nvd 1
ubuntu 2
mageia 1
gentoo
gentoo
MiniUPnPc: Arbitrary code execution
2018-01-07 00:00:00
nessus
nessus
GLSA-201801-08 : MiniUPnPc: Arbitrary code execution
2018-01-08 00:00:00
Debian DSA-3379-1 : miniupnpc - security update
2015-10-26 00:00:00
Ubuntu 14.04 LTS : MiniUPnP vulnerability (USN-2780-1)
2015-10-21 00:00:00
debian
debian
[SECURITY] [DSA 3379-1] miniupnpc security update
2015-10-25 12:38:19
[SECURITY] [DSA 3379-1] miniupnpc security update
2015-10-25 12:38:19
cvelist
cvelist
CVE-2015-6031
2015-11-02 19:00:00
archlinux
archlinux
miniupnpc: arbitrary code execution
2015-10-18 00:00:00
threatpost
threatpost
Cisco MiniUPnP Stack Smashing Protection Attack
2016-01-27 11:00:28
prion
prion
Buffer overflow
2015-11-02 19:59:00
openvas
openvas
Debian: Security Advisory (DSA-3379-1)
2015-10-24 00:00:00
Mageia: Security Advisory (MGASA-2015-0416)
2015-11-08 00:00:00
Ubuntu: Security Advisory (USN-2780-2)
2015-10-26 00:00:00
securityvulns
securityvulns
[USN-2780-2] MiniUPnP vulnerability
2015-10-25 00:00:00
MiniUPnP library buffer overflow
2015-10-25 00:00:00
debiancve
debiancve
CVE-2015-6031
2015-11-02 19:59:14
talos
talos
MiniUPnP Internet Gateway Device Protocol XML Parser Buffer Overflow
2015-09-15 00:00:00
cve
cve
CVE-2015-6031
2015-11-02 19:59:14
freebsd
freebsd
miniupnpc -- buffer overflow
2015-09-15 00:00:00
nvd
nvd
CVE-2015-6031
2015-11-02 19:59:14
ubuntu
ubuntu
MiniUPnP vulnerability
2015-10-23 00:00:00
MiniUPnP vulnerability
2015-10-20 00:00:00
mageia
mageia
Updated miniupnpc package fixes security vulnerability
2015-10-30 23:11:10

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

73.0%

JSON
Related for UB:CVE-2015-6031
gentoo1nessus6debian2cvelist1archlinux1threatpost1prion1openvas5securityvulns2debiancve1talos1cve1freebsd1nvd1ubuntu2mageia1