CVE-2016-6255

Description

References

• debian.org/security/2016/dsa-3736 · Third Party Advisory
• openwall.com/lists/oss-security/2016/07/18/13 · Mailing List
• openwall.com/lists/oss-security/2016/07/20/5 · Mailing List
• securityfocus.com/bid/92050 · Third Party Advisory
• mjg59/pupnp-code commit be0a01b · Issue Tracking
• security.gentoo.org/glsa/201701-52
• sourceforge.net/p/pupnp/code/ci/master/tree/ChangeLog · Release Notes
• twitter.com/mjg59/status/755062278513319936 · Third Party Advisory
• exploit-db.com/exploits/40589
• tenable.com/security/research/tra-2017-10

libupnp 的其他漏洞

• CVE-2020-13848高危 7.5Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message d…
• CVE-2016-8863严重 9.8Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows rem…
• CVE-2012-5961严重 10.0Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Device…
• CVE-2012-5958严重 10.0Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Device…