CVE-2020-12695
CVE-2020-12695
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.
CVSS 7.5 · High · EPSS 15.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
gupnp Debian:12
- Affected ranges
- ECOSYSTEM: < 1.2.3-1
Update to 1.2.3-1
gupnp Debian:13
- Affected ranges
- ECOSYSTEM: < 1.2.3-1
Update to 1.2.3-1
gupnp Debian:14
- Affected ranges
- ECOSYSTEM: < 1.2.3-1
Update to 1.2.3-1
minidlna Debian:12
- Affected ranges
- ECOSYSTEM: < 1.2.1+dfsg-3
Update to 1.2.1+dfsg-3
minidlna Debian:13
- Affected ranges
- ECOSYSTEM: < 1.2.1+dfsg-3
Update to 1.2.1+dfsg-3
minidlna Debian:14
- Affected ranges
- ECOSYSTEM: < 1.2.1+dfsg-3
Update to 1.2.1+dfsg-3
pupnp-1.8 Debian:12
- Versions
- 1:1.8.4-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
wpa Debian:12
- Affected ranges
- ECOSYSTEM: < 2:2.9.0-16
Update to 2:2.9.0-16
wpa Debian:13
- Affected ranges
- ECOSYSTEM: < 2:2.9.0-16
Update to 2:2.9.0-16
wpa Debian:14
- Affected ranges
- ECOSYSTEM: < 2:2.9.0-16
Update to 2:2.9.0-16
wpa Ubuntu:Pro:14.04:LTS
- Versions
- 1.0-3ubuntu2
- 1.0-3ubuntu3
- 1.0-3ubuntu4
- 2.1-0ubuntu1
- 2.1-0ubuntu1.1
- 2.1-0ubuntu1.2
- 2.1-0ubuntu1.3
- 2.1-0ubuntu1.4
- 2.1-0ubuntu1.5
- 2.1-0ubuntu1.6
- 2.1-0ubuntu1.7
- 2.1-0ubuntu1.7+esm1
- 2.1-0ubuntu1.7+esm2
- Affected ranges
- ECOSYSTEM: < 2.1-0ubuntu1.7+esm3
Update to 2.1-0ubuntu1.7+esm3
minidlna Ubuntu:16.04:LTS
- Versions
- 1.1.4+dfsg-4build1
- 1.1.5+dfsg-1
- 1.1.5+dfsg-2
- Affected ranges
- ECOSYSTEM: < 1.1.5+dfsg-2ubuntu0.1
Update to 1.1.5+dfsg-2ubuntu0.1
wpa Ubuntu:16.04:LTS
- Versions
- 2.4-0ubuntu3
- 2.4-0ubuntu4
- 2.4-0ubuntu5
- 2.4-0ubuntu6
- 2.4-0ubuntu6.2
- 2.4-0ubuntu6.3
- 2.4-0ubuntu6.4
- 2.4-0ubuntu6.5
- 2.4-0ubuntu6.6
- Affected ranges
- ECOSYSTEM: < 2.4-0ubuntu6.7
Update to 2.4-0ubuntu6.7
gupnp Ubuntu:16.04:LTS
- Versions
- 0.20.14-1
- 0.20.15-1
- 0.20.15-1ubuntu1
- 0.20.16-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libupnp Ubuntu:Pro:16.04:LTS
- Versions
- 1:1.6.19+git20141001-1
- 1:1.6.19+git20141001-1ubuntu1
- 1:1.6.19+git20160116-1
- 1:1.6.19+git20160116-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
minidlna Ubuntu:18.04:LTS
- Versions
- 1.2.0+dfsg-2
- 1.2.1+dfsg-1
- Affected ranges
- ECOSYSTEM: < 1.2.1+dfsg-1ubuntu0.18.04.1
Update to 1.2.1+dfsg-1ubuntu0.18.04.1
wpa Ubuntu:18.04:LTS
- Versions
- 2.4-0ubuntu10
- 2:2.4-1.1ubuntu1
- 2:2.6-15ubuntu1
- 2:2.6-15ubuntu2
- 2:2.6-15ubuntu2.1
- 2:2.6-15ubuntu2.2
- 2:2.6-15ubuntu2.3
- 2:2.6-15ubuntu2.4
- 2:2.6-15ubuntu2.5
- 2:2.6-15ubuntu2.6
- Affected ranges
- ECOSYSTEM: < 2:2.6-15ubuntu2.7
Update to 2:2.6-15ubuntu2.7
gupnp Ubuntu:18.04:LTS
- Versions
- 1.0.1-1
- 1.0.2-1
- 1.0.2-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libupnp Ubuntu:18.04:LTS
- Versions
- 1:1.6.22-1
- 1:1.6.24-1
- 1:1.6.24-2
- 1:1.6.24-3
- 1:1.6.24-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pupnp-1.8 Ubuntu:18.04:LTS
- Versions
- 1:1.8.2-2
- 1:1.8.2-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
gupnp Ubuntu:20.04:LTS
- Versions
- 1.2.1-1
- 1.2.1-2
- 1.2.2-1
- Affected ranges
- ECOSYSTEM: < 1.2.3-0ubuntu0.20.04.1
Update to 1.2.3-0ubuntu0.20.04.1
minidlna Ubuntu:20.04:LTS
- Versions
- 1.2.1+dfsg-1build1
- Affected ranges
- ECOSYSTEM: < 1.2.1+dfsg-1ubuntu0.20.04.1
Update to 1.2.1+dfsg-1ubuntu0.20.04.1
wpa Ubuntu:20.04:LTS
- Versions
- 2:2.9-1ubuntu2
- 2:2.9-1ubuntu3
- 2:2.9-1ubuntu4
- 2:2.9-1ubuntu4.1
- Affected ranges
- ECOSYSTEM: < 2:2.9-1ubuntu4.2
Update to 2:2.9-1ubuntu4.2
Original sources
- https://www.callstranger.com
- https://www.kb.cert.org/vuls/id/339275
- http://www.openwall.com/lists/oss-security/2020/06/08/2
- https://www.tenable.com/blog/cve-2020-12695-callstranger-vulnerability-in-universal-plug-and-play-upnp-puts-billions-of
- https://github.com/yunuscadirci/CallStranger
- http://packetstormsecurity.com/files/158051/CallStranger-UPnP-Vulnerability-Checker.html
- https://corelight.blog/2020/06/10/detecting-the-new-callstranger-upnp-vulnerability-with-zeek/
- https://github.com/corelight/callstranger-detector
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZDWHKGN3LMGSUEOAAVAMOD3IUIPJVOJ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQEYVY4D7LASH6AI4WK3IK2QBFHHF3Q2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3SHL4LOFGHJ3DIXSUIQELGVBDJ7V7LB/
- https://lists.debian.org/debian-lts-announce/2020/08/msg00011.html
- https://lists.debian.org/debian-lts-announce/2020/08/msg00013.html
- https://usn.ubuntu.com/4494-1/
- https://www.debian.org/security/2020/dsa-4806
- https://lists.debian.org/debian-lts-announce/2020/12/msg00017.html
- https://www.debian.org/security/2021/dsa-4898
- https://nvd.nist.gov/vuln/detail/CVE-2020-12695