Security Update for miniupnpc
Summary
DLA-949-1: miniupnpc - security update. Affects miniupnpc versions < 1.5-2+deb7u2. Fixed in 1.5-2+deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
miniupnpc is a library and a command-line tool for interacting with the UPnP protocol. It allows devices on a network to discover and communicate with each other. This vulnerability affects miniupnpc version 1.5-2+deb7u2 and earlier.
Vulnerability Detail
An integer signedness error was discovered in the miniupnpc UPnP client, which could be exploited by remote attackers to launch a denial of service attack. This vulnerability could potentially lead to the disruption of network communication and services.
How To Fix
Minimum fixed version
1.5-2+deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade miniupnpcTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the security update as soon as possible to mitigate the risk of exploitation.
Conclusion
The miniupnpc library and command-line tool have been found to have a vulnerability that could allow remote attackers to launch a denial of service attack. It is recommended to upgrade to the latest version of the miniupnpc package to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for miniupnpc →
FAQ
miniupnpc is a library and command-line tool for UPnP protocol interactions.
This vulnerability could allow remote attackers to launch a denial of service attack, potentially disrupting network communication and services.
The vulnerability affects miniupnpc version 1.5-2+deb7u2 and earlier.
To fix this vulnerability, upgrade the miniupnpc package to version 1.5-2+deb7u2 or later.
There is no known workaround. It is crucial to apply the security update to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for miniupnpc.
