PatchFirst · Latest vulnerabilities
Vulnerabilities published for minidlna in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove.
The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.
Check your installed stack and versions against the current vulnerability feeds.