ISOMAN

CVE

CVE-2015-6031

Buffer overflow in the IGDstartelt function in igd_desc_parse.c in the MiniUPnP client (aka MiniUPnPc) before 1.9.20150917 allows remote UPNP servers to cause a denial of service (application crash) and possibly execute arbitrary code via an "oversized" XML element name.

Severity
MEDIUM
CVSS
6.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-updates/2015-11/msg00122.html
  2. http://talosintel.com/reports/TALOS-2015-0035/
  3. http://www.debian.org/security/2015/dsa-3379
  4. http://www.securityfocus.com/bid/77306
  5. http://www.ubuntu.com/usn/USN-2780-1
  6. http://www.ubuntu.com/usn/USN-2780-2
  7. https://github.com/miniupnp/miniupnp/blob/master/miniupnpc/Changelog.txt
  8. https://github.com/miniupnp/miniupnp/commit/79cca974a4c2ab1199786732a67ff6d898051b78
  9. https://security.gentoo.org/glsa/201801-08
  10. http://lists.opensuse.org/opensuse-updates/2015-11/msg00122.html
  11. http://talosintel.com/reports/TALOS-2015-0035/
  12. http://www.debian.org/security/2015/dsa-3379
  13. http://www.securityfocus.com/bid/77306
  14. http://www.ubuntu.com/usn/USN-2780-1
  15. http://www.ubuntu.com/usn/USN-2780-2
  16. https://github.com/miniupnp/miniupnp/blob/master/miniupnpc/Changelog.txt
  17. https://github.com/miniupnp/miniupnp/commit/79cca974a4c2ab1199786732a67ff6d898051b78
  18. https://security.gentoo.org/glsa/201801-08