pupnp-1.8

4 results · Feed

• High 7.6
  CVE-2021-29462

  DNS rebinding in pupnp

  The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server part of pupnp (libupnp) appears to be vulnerable to DNS rebinding attacks because it does not check the value of the `Host` header. This can …

  pupnp pupnp libupnp pupnp-1.8 Debian Ubuntu
  Apr 20, 2021
• Unscored —
  CVE-2021-28302

  A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() func…

  libupnp pupnp-1.8 mediatomb pupnp-1.8 Debian Ubuntu
  Mar 12, 2021
• Unscored —
  CVE-2020-12695 Public exploit EPSS 15%

  The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription …

  wpa wpa hostapd libupnp Debian Ubuntu Alpine
  Jun 8, 2020
• Unscored —
  CVE-2020-13848

  Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a c…

  libupnp pupnp-1.8 pupnp-1.8 libupnp Debian Ubuntu Alpine
  Jun 4, 2020