CVE-2019-12111
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in copyIPv6IfDifferent in pcpserver.c.
- Update to 1.8.20140523-4.1+deb9u2build0.16.04.1
Published Updated
PatchFirst · Latest vulnerabilities
miniupnpd vulnerabilities
Vulnerabilities published for miniupnpd in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 6
CVE-2019-12110
An AddPortMapping Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in upnpredirect.c.
- Update to 1.8.20140523-4.1+deb9u2build0.16.04.1
Published UpdatedCVE-2019-12109
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for rem_port.
- Update to 1.8.20140523-4.1+deb9u2build0.16.04.1
Published UpdatedCVE-2019-12108
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for int_port.
- Update to 1.8.20140523-4.1+deb9u2build0.16.04.1
Published UpdatedCVE-2019-12107
The upnp_event_prepare function in upnpevents.c in MiniUPnP MiniUPnPd through 2.1 allows a remote attacker to leak information from the heap due to improper validation of an snprintf return value.
- Update to 1.8.20140523-4.1+deb9u2build0.16.04.1
Published UpdatedCVE-2017-1000494
Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact
- Update to 1.8.20140523-4.1+deb9u1build0.16.04.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.