Unscored DSA-3736-1 2 CVEs

libupnp - security update

Published Dec 16, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	libupnp	1:1.6.19+git20141001-1+deb8u1

Vulnerabilities 2

Unscored —

CVE-2016-6255 Public exploit EPSS 27%

Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a …

libupnp Ubuntu

Mar 7, 2017
Unscored —

CVE-2016-8863 Public exploit

Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) bef…

libupnp libupnp4 Ubuntu

Mar 7, 2017