PT-2013-6325 · Debian · Libupnp

Hd Moore · Publicado 1970-01-01 · Atualizado 2015-09-01 · CVE-2012-5962

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libupnp versions 1.3.1

Description The issue affects the libupnp package in Debian GNU/Linux, potentially leading to breaches in confidentiality, integrity, and availability of protected information. Exploitation can occur remotely. A stack-based buffer overflow in the unique service name function allows remote attackers to execute arbitrary code via a long DeviceType field in a UDP packet.

Recommendations For libupnp version 1.3.1, consider disabling the unique service name function as a temporary workaround until a patch is available. Restrict access to the SSDP parser in the portable SDK for UPnP Devices to minimize the risk of exploitation. Avoid using long DeviceType fields in UDP packets until the issue is resolved.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-01310

BDU:2015-01311

CVE-2012-5962

DSA-2614-1

DSA-2615-1

Produtos afetados

Libupnp

Referências · 29

• 🔥 https://exploit-db.com/exploits/24455 · Exploit
• 🔥 http://securityfocus.com/bid/57602 · Exploit
• https://bdu.fstec.ru/vul/2015-01310 · Nota de Segurança
• http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5964 · Nota de Segurança
• http://debian.org/security/dsa-2614 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5962 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5963 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDVSA-2013:098 · Aviso do Fabricante
• http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf · Nota
• http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf · Nota
• http://debian.org/security/2013/dsa-2615 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-5962 · Nota de Segurança
• https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037 · Nota
• http://kb.cert.org/vuls/id/922681 · Correção