PT-2013-6325 · Debian · Libupnp

Hd Moore · Published 1970-01-01 · Updated 2015-09-01 · CVE-2012-5962

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libupnp versions 1.3.1

Description The issue affects the libupnp package in Debian GNU/Linux, potentially leading to breaches in confidentiality, integrity, and availability of protected information. Exploitation can occur remotely. A stack-based buffer overflow in the unique service name function allows remote attackers to execute arbitrary code via a long DeviceType field in a UDP packet.

Recommendations For libupnp version 1.3.1, consider disabling the unique service name function as a temporary workaround until a patch is available. Restrict access to the SSDP parser in the portable SDK for UPnP Devices to minimize the risk of exploitation. Avoid using long DeviceType fields in UDP packets until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-01310

BDU:2015-01311

CVE-2012-5962

DSA-2614-1

DSA-2615-1

Affected Products

Libupnp

References · 29

• 🔥 https://exploit-db.com/exploits/24455 · Exploit
• 🔥 http://securityfocus.com/bid/57602 · Exploit
• https://bdu.fstec.ru/vul/2015-01310 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5964 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5962 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5963 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2013:098 · Vendor Advisory
• http://debian.org/security/2013/dsa-2615 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-5962 · Security Note
• http://kb.cert.org/vuls/id/922681 · Patch
• http://debian.org/security/2013/dsa-2614 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5960 · Security Note
• https://bdu.fstec.ru/vul/2015-01311 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5959 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5961 · Security Note