PT-2019-12648 · Miniupnp+1 · Miniupnpd+1

Ben Barnea · Published 2019-05-15 · Updated 2020-09-28 · CVE-2019-12111

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MiniUPnPd versions through 2.1

Description A Denial Of Service issue exists due to a NULL pointer dereference in the copyIPv6IfDifferent function in pcpserver.c.

Recommendations For versions through 2.1, update to a version that fixes the NULL pointer dereference issue in the copyIPv6IfDifferent function.

Exploit

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2019-12111

DLA-1811-1

USN-4542-1

Affected Products

Miniupnpd

Ubuntu

References · 18

• 🔥 https://vdoo.com/blog/security-issues-discovered-in-miniupnp · Exploit
• https://github.com/miniupnp/miniupnp/commit/cb8a02af7a5677cf608e86d57ab04241cf34e24f · Patch
• https://osv.dev/vulnerability/DLA-1811-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-12111 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-12111 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-12111 · Vendor Advisory
• https://usn.ubuntu.com/4542-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4542-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-12110 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-12108 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-12111 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4542-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-12107 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-12111 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12111 · Security Note