PT-2019-12648 · Miniupnp+1 · Miniupnpd+1

Ben Barnea · Publicado 2019-05-15 · Atualizado 2020-09-28 · CVE-2019-12111

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MiniUPnPd versions through 2.1

Description A Denial Of Service issue exists due to a NULL pointer dereference in the copyIPv6IfDifferent function in pcpserver.c.

Recommendations For versions through 2.1, update to a version that fixes the NULL pointer dereference issue in the copyIPv6IfDifferent function.

Exploit

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2019-12111

DLA-1811-1

USN-4542-1

Produtos afetados

Miniupnpd

Ubuntu

Referências · 18

• 🔥 https://vdoo.com/blog/security-issues-discovered-in-miniupnp · Exploit
• https://github.com/miniupnp/miniupnp/commit/cb8a02af7a5677cf608e86d57ab04241cf34e24f · Correção
• https://osv.dev/vulnerability/DLA-1811-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-12111 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-12111 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-12111 · Aviso do Fabricante
• https://usn.ubuntu.com/4542-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-4542-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-12110 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-12108 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-12111 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-4542-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-12107 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-12111 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-12111 · Nota de Segurança