PT-2014-9142 · Mythtv · Mythtv

Published 2014-10-29 · Updated 2014-10-29

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions MythTV (affected versions not specified)

Description The issue concerns MythTV's UPNP component, which was susceptible to SSDP reflection attacks. To mitigate this, the component has been hardened to disallow SSDP device discovery from non-local addresses.

Recommendations For the affected versions of MythTV, update the software to the latest version that includes the hardened UPNP component to prevent SSDP reflection attacks.

Related Identifiers

MGASA-2014-0435

Affected Products

Mythtv

References · 5

• https://osv.dev/vulnerability/MGASA-2014-0435 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0435.html · Security Note
• https://bugs.mageia.org/show_bug.cgi?id=14347 · Note
• https://prolexic.com/knowledge-center-ddos-threat-advisory-ssdp-reflection-ddos-attacks.html · Note
• https://prolexic.com/kcresources/prolexic-threat-advisories/prolexic-threat-advisory-ssdp-reflection-ddos-attacks/ssdp-reflection-attacks-cybersecurity-locked.html · Note