CVE-2015-6031

Description

Buffer overflow in the IGDstartelt function in igd_desc_parse.c in the MiniUPnP client (aka MiniUPnPc) before 1.9.20150917 allows remote UPNP servers to cause a denial of service (application crash) and possibly execute arbitrary code via an oversized XML element name.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

2.803

Associated Vulnerability

Vulnerability	OS Platform
UPnP IGD client lightweight library (USN-2780-1) libminiupnpc10_1.9.20140610-2ubuntu1.1_i386.deb	Linux
UPnP IGD client lightweight library (USN-2780-1) libminiupnpc10_1.9.20140610-2ubuntu1.1_amd64.deb	Linux
UPnP IGD client lightweight library (USN-2780-2) libminiupnpc10_1.9.20140610-2ubuntu2_i386.deb	Linux
UPnP IGD client lightweight library (USN-2780-2) libminiupnpc10_1.9.20140610-2ubuntu2_amd64.deb	Linux
miniupnpc security update(DSA-3379-1) miniupnpc_1.5-2+deb7u1_i386.deb	Linux
miniupnpc security update(DSA-3379-1) miniupnpc_1.5-2+deb7u1_amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234