CVE-2020-13848

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-06/msg00030.html
• lists.opensuse.org/opensuse-security-announce/2020-06/msg00033.html
• pupnp/pupnp commit c805c1d · Patch
• pupnp/pupnp · Third Party Advisory
• lists.debian.org/debian-lts-announce/2020/06/msg00006.html · Mailing List
• lists.debian.org/debian-lts-announce/2021/03/msg00007.html

libupnp のその他の脆弱性

• CVE-2016-8863緊急 9.8Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows rem…
• CVE-2016-6255高 7.5Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without …
• CVE-2012-5961緊急 10.0Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Device…
• CVE-2012-5958緊急 10.0Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Device…