CVE-2016-8863 Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to cause a denial of service (crash) or possib...
CriticalCVSS 9.8
EPSS 8.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a valid URI followed by an invalid one in the CALLBACK header of an SUBSCRIBE request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libupnp project libupnp | <= 1.6.20 | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- 92849 vdb-entry
- GLSA-201701-52 vendor-advisory
- sourceforge.net issue-tracking third-party-advisory
- sourceforge.net release-notes third-party-advisory
- DSA-3736 third-party-advisory vendor-advisory
- www.tenable.com