Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2017-8798

Published: 10 May 2017

Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified other impact.

Priority

Medium

CVSS 3 base score: 9.8

Status

Package Release Status
miniupnpc
Launchpad, Ubuntu, Debian
precise Does not exist

trusty Does not exist
(trusty was released [1.6-3ubuntu2.14.04.3])
upstream
Released (1.9.20140610-3)
xenial
Released (1.9.20140610-2ubuntu2.16.04.1)
yakkety
Released (1.9.20140610-2ubuntu2.16.10.1)
zesty
Released (1.9.20140610-2ubuntu2.17.04.1)
Patches:
upstream: https://github.com/miniupnp/miniupnp/commit/f0f1f4b22d6a98536377a1bb07e7c20e4703d229