PT-2019-12889 · Miniupnp+1 · Miniupnpd+1

Publicado 2019-10-17 · Atualizado 2019-10-22 · CVE-2019-12611

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Bitdefender BOX firmware versions prior to 2.1.37.37-34

Description An issue affects the general reliability of the product. Specially crafted packets sent to the miniupnpd implementation result in the device allocating memory without freeing it later. This behavior can cause the miniupnpd component to crash or trigger a device reboot.

Recommendations For versions prior to 2.1.37.37-34, update to version 2.1.37.37-34 or later to resolve the issue. As a temporary workaround, consider restricting access to the miniupnpd component to minimize the risk of exploitation.

Correção

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2019-12611

Produtos afetados

Bitdefender Box

Miniupnpd

Referências · 3

• https://bitdefender.com/support/security-advisories/bitdefender-box-denial-service-va-3184 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-12611 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-12611 · Nota de Segurança