libupnp vulnerabilities (Ubuntu)
12 vulnerabilities.
-
libupnpUbuntu pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing 7.5 High -
libupnpUbuntu pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling 7.1 High -
libupnpUbuntu libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered 7.5 High -
libupnpUbuntu pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes 7.5 High -
libupnpUbuntu pupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow 6.5 Medium -
libupnpUbuntu pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion 6.9 Medium -
libupnpUbuntu DNS rebinding in pupnp 7.6 High -
libupnpUbuntu A stack overflow in pupnp 1.16.1 can cause the denial of service through the Parser_parseDocument... 7.5 High -
libupnpUbuntu The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the... 7.5 High -
libupnpUbuntu Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of... 7.5 High -
libupnpUbuntu Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP... 9.8 Critical -
libupnpUbuntu Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files... 7.5 High