CVE-2012-5958

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP...

10.0 HighPublic exploitFix available

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction.

Exploit likelihood

83.2%Down 8.5 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2012-5958
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-5958
Updated: 2026-11-02

EUVDEUVD-2012-5832 No score

Record: EUVD-2012-5832
Updated: 2026-11-03

GitHub AdvisoriesGHSA-mpm3-m3f6-fx5w No score

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP...

Record: GHSA-mpm3-m3f6-fx5w
Weakness: CWE-119
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10300-1 No score

libupnp-devel-1.6.19-1.8 on GA media

These are all security issues fixed in the libupnp-devel-1.6.19-1.8 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10300-1
Updated: 2026-11-02

Affected products

libupnp project libupnp

Affected packages

Affected packages
Package	Affected	Fixed
`libupnp` Debian:6.0	before 1:1.6.6-5+squeeze1, plus listed versions 1:1.6.6-5	1:1.6.6-5+squeeze1
`libupnp4` Debian:6.0	before 1.8.0~svn20100507-1+squeeze1, plus listed versions 1.8.0~svn20100507-1	1.8.0~svn20100507-1+squeeze1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Portable UPnP SDK - 'unique_service_name()' Remote Code Execution (Metasploit)	2013-02-05
Exploit-DB	libupnp 1.6.18 - Stack-based buffer overflow (DoS)	2020-11-27
Metasploit	UPnP SSDP M-SEARCH Information Discovery
Metasploit	Portable UPnP SDK unique_service_name() Remote Code Execution	2013-01-29
PoC in GitHub	hmrumman777-beep/NetAudit-IoT	2026-03-23
PoC in GitHub	lochiiconnectivity/vulnupnp	2013-04-14

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-5958 is a high vulnerability (CVSS 10.0) in Libupnp Project Libupnp, published January 31, 2013. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 83.2%, the 99th percentile. Fixed in libupnp 1:1.6.6-5+squeeze1.

References

Show 22 moreShow less