Skip to content
OpenAdvisories
Unscored USN-4794-1 2 CVEs

libupnp vulnerabilities

Published Mar 15, 2021 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

Matthew Garrett discovered that libupnp mishandled POST requests by
default. An attacker could use this vulnerability to write files to
arbitrary locations in the victim's filesystem, possibly as root.
(CVE-2016-6255)

It was discovered that libupnp mishandled certain input. A remote attacker
could use this vulnerability to cause a denial of service (crash) or
possibly execute arbitrary code. (CVE-2016-8863)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS libupnp 1:1.6.19+git20160116-1ubuntu0.1~esm1

Vulnerabilities 2

  • Unscored —
    CVE-2016-6255 Public exploit EPSS 27%

    Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a …

    libupnp Ubuntu
  • Unscored —
    CVE-2016-8863 Public exploit

    Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) bef…

    libupnp libupnp4 Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2016-6255
  • report
    https://ubuntu.com/security/CVE-2016-8863