Summary
It was discovered that MiniUPnP incorrectly handled memory. A remote
attacker could use this issue to cause a denial of service or possibly
execute arbitrary code with privileges of the user running an application
that uses the MiniUPnP library.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | miniupnpc | 1.6-3ubuntu2.14.04.3 |
| Ubuntu · 16.04 LTS 16.04:LTS | miniupnpc | 1.9.20140610-2ubuntu2.16.04.1 |
Vulnerabilities 1
-
Unscored —
Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of …
References
-
report
https://ubuntu.com/security/CVE-2017-8798