Summary
It was discovered that GUPnP incorrectly filtered local requests. If a user
were tricked into visiting a malicious website, a remote attacker could
possibly use this issue to perform actions against local UPnP services such
as obtaining or altering sensitive information.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | gupnp | 1.2.3-0ubuntu0.20.04.2 |
Vulnerabilities 1
-
Unscored —
An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web s…
References
-
report
https://ubuntu.com/security/CVE-2021-33516