CVE-2009-2174 GUPnP 0.12.7 allows remote attackers to cause a denial of service (crash) via an empty (1) subscription or (2) control message.
MediumCVSS 5.0
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GUPnP 0.12.7 allows remote attackers to cause a denial of service (crash) via an empty (1) subscription or (2) control message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gupnp | = 0.12.7 | No fix listed |
| debian/gupnp(Debian:12) | < 0.12.6-3.1 | 0.12.6-3.1 |
| debian/gupnp(Debian:13) | < 0.12.6-3.1 | 0.12.6-3.1 |
| debian/gupnp(Debian:14) | < 0.12.6-3.1 | 0.12.6-3.1 |
References
- Debian Security Tracker CVE-2009-2174 vendor-advisory
- bugs.debian.org issue-tracking
- bugzilla.openedhand.com exploit
- git.gupnp.org
- 35472 third-party-advisory vendor-advisory
- 35482 third-party-advisory vendor-advisory
- 55128 patch vdb-entry
- 35390 exploit patch vdb-entry
- ADV-2009-1597 patch vdb-entry vendor-advisory
- FEDORA-2009-5865 patch vendor-advisory
- FEDORA-2009-5861 patch vendor-advisory