CVE-2016-3178 The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (out-of-bounds memory access and daemon crash) via vectors involving a negative l...
MediumCVSS 5.5
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (out-of-bounds memory access and daemon crash) via vectors involving a negative length value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/minissdpd(Debian:12) | < 1.2.20130907-3.2 | 1.2.20130907-3.2 |
| debian/minissdpd(Debian:13) | < 1.2.20130907-3.2 | 1.2.20130907-3.2 |
| debian/minissdpd(Debian:14) | < 1.2.20130907-3.2 | 1.2.20130907-3.2 |
| miniupnp project minissdpd | = 1.2.20130907-3 | No fix listed |
References
- Debian Security Tracker CVE-2016-3178 vendor-advisory
- speirofr.appspot.com patch third-party-advisory
- [oss-security] 20160316 Re: CVE Request: The minissdpd (v 1.2.20130907-3) is affected by an improper validation of array index weakness mailing-list patch third-party-advisory
- bugs.debian.org issue-tracking mailing-list patch third-party-advisory
- github.com patch third-party-advisory
- bugs.debian.org issue-tracking