Search CVE reports

Toggle filters

1 – 10 of 14 results

CVE-2021-29462

Medium priority
Needs evaluation

The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server part of pupnp (libupnp) appears to be vulnerable to DNS rebinding attacks because it does not check the value of...

3 affected packages

libupnp, mediatomb, pupnp-1.8

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libupnp Not in release Not in release Not in release Needs evaluation
mediatomb Not in release Not in release Not in release Not in release
pupnp-1.8 Not in release Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2021-28302

Medium priority
Vulnerable

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function. ixmlNode_free() will release a child node recursively, which will consume stack space and lead to a crash.

3 affected packages

libupnp, mediatomb, pupnp-1.8

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libupnp Not in release Not in release Not in release Vulnerable
mediatomb Not in release Not in release Not in release Not in release
pupnp-1.8 Not in release Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2020-12695

Medium priority

Some fixes available 19 of 32

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka...

5 affected packages

wpa, gupnp, minidlna, libupnp, pupnp-1.8

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
wpa Fixed Fixed Fixed Fixed
gupnp Not affected Not affected Fixed Vulnerable
minidlna Not affected Not affected Fixed Fixed
libupnp Not in release Not in release Not in release Vulnerable
pupnp-1.8 Not in release Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2020-13848

Medium priority
Needs evaluation

Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath...

2 affected packages

pupnp-1.8, libupnp

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
pupnp-1.8 Not in release Needs evaluation Needs evaluation Needs evaluation
libupnp Not in release Not in release Not in release Needs evaluation
Show less packages

CVE-2016-8863

Medium priority

Some fixes available 3 of 8

Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via...

2 affected packages

libupnp, libupnp4

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libupnp — Not in release Not in release Not affected
libupnp4 — Not in release Not in release Not in release
Show less packages

CVE-2016-6255

High priority

Some fixes available 2 of 7

Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.

1 affected package

libupnp

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libupnp — Not in release Not in release Not affected
Show less packages

CVE-2012-5965

Medium priority

Some fixes available 7 of 9

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to...

2 affected packages

libupnp, libupnp4

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libupnp — — — —
libupnp4 — — — —
Show less packages

CVE-2012-5964

Medium priority

Some fixes available 7 of 9

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to...

2 affected packages

libupnp, libupnp4

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libupnp — — — —
libupnp4 — — — —
Show less packages

CVE-2012-5963

Medium priority

Some fixes available 7 of 9

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to...

2 affected packages

libupnp, libupnp4

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libupnp — — — —
libupnp4 — — — —
Show less packages

CVE-2012-5962

Medium priority

Some fixes available 7 of 9

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to...

2 affected packages

libupnp, libupnp4

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libupnp — — — —
libupnp4 — — — —
Show less packages
  1. Previous page
  2. 1
  3. 2
  4. Next page
Export to JSON