MI
Product
miniupnpd
13
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 6Medium 1Low 0
Watch
Add miniupnpd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1000494 | 7.8 | Jan 3 | Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (Segmentation fault and… Affected: before 2.0 |
| CVE-2013-2600 | 7.5 | Nov 1 | MiniUPnPd has information disclosure use of snprintf() Affected: 1.8 |
| CVE-2019-12111 | 7.5 | May 15 | A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in copyIPv6IfDifferent in pcpserver.c Affected: through 2.1 |
| CVE-2019-12109 | 7.5 | May 15 | A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for rem_port Affected: through 2.1 |
| CVE-2019-12108 | 7.5 | May 15 | A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for int_port Affected: through 2.1 |
| CVE-2019-12106 | 7.5 | May 15 | The updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and 1.5 allows a remote attacker to crash the process due to a Use After Free vulnerability Affected: 1.4; 1.5 |
Showing 6