PT-2014-9142 · Mythtv · Mythtv

Publicado 2014-10-29 · Atualizado 2014-10-29

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions MythTV (affected versions not specified)

Description The issue concerns MythTV's UPNP component, which was susceptible to SSDP reflection attacks. To mitigate this, the component has been hardened to disallow SSDP device discovery from non-local addresses.

Recommendations For the affected versions of MythTV, update the software to the latest version that includes the hardened UPNP component to prevent SSDP reflection attacks.

Identificadores relacionados

MGASA-2014-0435

Produtos afetados

Mythtv

Referências · 5

• https://bugs.mageia.org/show_bug.cgi?id=14347 · Nota
• https://osv.dev/vulnerability/MGASA-2014-0435 · Aviso do Fabricante
• https://prolexic.com/knowledge-center-ddos-threat-advisory-ssdp-reflection-ddos-attacks.html · Nota
• https://advisories.mageia.org/MGASA-2014-0435.html · Nota de Segurança
• https://prolexic.com/kcresources/prolexic-threat-advisories/prolexic-threat-advisory-ssdp-reflection-ddos-attacks/ssdp-reflection-attacks-cybersecurity-locked.html · Nota