Description
An SQL Injection vulnerability exists in MiniDLNA prior to 1.1.0
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | minidlna | 1.1.2+dfsg-1 | — |
| Debian 13 | minidlna | 1.1.2+dfsg-1 | — |
| Debian 12 | minidlna | 1.1.2+dfsg-1 | — |
References
- https://security-tracker.debian.org/tracker/CVE-2013-2745
- http://archives.neohapsis.com/archives/bugtraq/2013-07/0100.html
- http://media.blackhat.com/bh-us-12/Briefings/Cutlip/BH_US_12_Cutlip_SQL_Exploitation_WP.pdf
- https://www.securityfocus.com/archive/1/527299/30/0
- https://debian.pkgs.org/8/debian-main-amd64/minidlna_1.1.2+dfsg-1.1+b3_amd64.deb.html