CVE-2016-8863

概要

参考情報

• securityfocus.com/bid/92849
• security.gentoo.org/glsa/201701-52
• sourceforge.net/p/pupnp/bugs/133 · Issue Tracking
• sourceforge.net/p/pupnp/code/ci/master/tree/ChangeLog · Release Notes
• debian.org/security/2016/dsa-3736 · Third Party Advisory
• tenable.com/security/research/tra-2017-10

libupnp のその他の脆弱性

• CVE-2020-13848高 7.5Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message d…
• CVE-2016-6255高 7.5Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without …
• CVE-2012-5961緊急 10.0Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Device…
• CVE-2012-5958緊急 10.0Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Device…