Summary
It was discovered that MiniUPnPc incorrectly handled certain buffer
lengths. A remote attacker could possibly use this issue to cause
applications using MiniUPnPc to crash, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | miniupnpc | 1.6-3ubuntu2.14.04.1 |
Vulnerabilities 1
-
Unscored —
The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service (crash)…
References
-
report
https://ubuntu.com/security/CVE-2014-3985