CVE-2014-3985

MEDIO 5.0CVE-2014-3985 · Published 11/09/2014 · updated 17/06/2026

En resumen

CVE-2014-3985 es una vulnerabilidad MEDIO (CVSS 5.0) que afecta a miniupnp (miniupnp project).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.3%, mayor que el 88.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
miniupnp miniupnp_project	`= 1.9`	No fix yet

Description

The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service (crash) via crafted headers that trigger an out-of-bounds read.

References

lists.opensuse.org/opensuse-updates/2014-06/msg00039.html · Mailing List
seclists.org/oss-sec/2014/q2/201 · Exploit
seclists.org/oss-sec/2014/q2/496 · Exploit
securityfocus.com/bid/67152 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
miniupnp/miniupnp commit 3a87aa2 · Patch
security.gentoo.org/glsa/201701-41 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free