Summary
It was discovered that MiniUPnP incorrectly handled memory. A remote
attacker could use this issue to cause a denial of service or possibly
execute arbitrary code with privileges of the user running an application
that uses the MiniUPnP library.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | miniupnpc | 1.6-3ubuntu2.14.04.4 |
| Ubuntu · 16.04 LTS 16.04:LTS | miniupnpc | 1.9.20140610-2ubuntu2.16.04.2 |
Vulnerabilities 1
-
Unscored —
Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an att…
References
-
report
https://ubuntu.com/security/CVE-2017-1000494