Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28507
HistoryDec 08, 2020 - 12:44 a.m.

Remote Code Execution (RCE)

2020-12-0800:44:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16

EPSS

0.071

Percentile

94.0%

MiniDLNA is vulnerable to remote code execution. An attacker is able to send a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove.