p PatchFirst

CVE-2026-5720

CVE-2026-5720 · miniupnpd Integer Underflow SOAPAction Header Parsing

This page contains facts from public vulnerability sources. Check the original advisory before updating.

miniupnpd contains an integer underflow vulnerability in SOAPAction header parsing that allows remote attackers to cause a denial of service or information disclosure by sending a malformed SOAPAction header with a single quote. Attackers can trigger an out-of-bounds memory read by exploiting improper length validation in ParseHttpHeaders(), where the parsed length underflows to a large unsigned value when passed to memchr(), causing the process to scan memory far beyond the allocated HTTP request buffer.

CVSS 7.1 · High · EPSS 0.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • miniupnpd

    Versions
    • ≥ 0, < 2.3.10: Affected (semver)

    Update to 2.3.10

  • miniupnpd Debian:12

    Versions
    • 2.3.1-1
    • 2.3.10-1
    • 2.3.3-1
    • 2.3.4-1
    • 2.3.7-1
    • 2.3.7-2
    • 2.3.9-1
    • 2.3.9-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • miniupnpd Debian:13

    Versions
    • 2.3.9-2
    Affected ranges
    • ECOSYSTEM: < 2.3.9-2+deb13u1

    Update to 2.3.9-2+deb13u1

  • miniupnpd Debian:14

    Versions
    • 2.3.9-2
    Affected ranges
    • ECOSYSTEM: < 2.3.10-1

    Update to 2.3.10-1

  • miniupnpd Ubuntu:Pro:16.04:LTS

    Versions
    • 1.8.20140523-4
    • 1.8.20140523-4.1+deb9u1build0.16.04.1
    • 1.8.20140523-4.1+deb9u2build0.16.04.1
    Affected ranges
    • ECOSYSTEM: < 1.8.20140523-4.1+deb9u2ubuntu0.1~esm1

    Update to 1.8.20140523-4.1+deb9u2ubuntu0.1~esm1

  • miniupnpd Ubuntu:Pro:18.04:LTS

    Versions
    • 1.8.20140523-4.1
    • 1.8.20140523-4.2
    • 2.0.20171212-1
    • 2.0.20171212-2
    Affected ranges
    • ECOSYSTEM: < 2.0.20171212-2ubuntu0.1~esm1

    Update to 2.0.20171212-2ubuntu0.1~esm1

  • miniupnpd Ubuntu:Pro:20.04:LTS

    Versions
    • 2.1-6ubuntu2
    • 2.1-6.1
    Affected ranges
    • ECOSYSTEM: < 2.1-6.1ubuntu0.1~esm1

    Update to 2.1-6.1ubuntu0.1~esm1

  • miniupnpd Ubuntu:Pro:22.04:LTS

    Versions
    • 2.2.1-1
    • 2.2.3-1
    Affected ranges
    • ECOSYSTEM: < 2.2.3-1ubuntu0.1~esm1

    Update to 2.2.3-1ubuntu0.1~esm1

  • miniupnpd Ubuntu:Pro:24.04:LTS

    Versions
    • 2.3.3-1
    • 2.3.4-1
    Affected ranges
    • ECOSYSTEM: < 2.3.4-1ubuntu0.1~esm1

    Update to 2.3.4-1ubuntu0.1~esm1

  • miniupnpd Ubuntu:25.10

    Versions
    • 2.3.7-2
    • 2.3.9-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • miniupnpd Ubuntu:Pro:26.04:LTS

    Versions
    • 2.3.9-2
    • 2.3.9-2build1
    Affected ranges
    • ECOSYSTEM: < 2.3.9-2ubuntu0.1~esm1

    Update to 2.3.9-2ubuntu0.1~esm1

Original sources

Check your server →