| Package | Affected versions | Patched versions |
|---|---|---|
| simple service discovery protocol responder | ≥ 1.0, ≤ 1.5 |
SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte. This results in a crash of the server, but only when strict stack checking is enabled. This is caused by an off-by-one error in ssdp_recv in ssdpd.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free