debian/minissdpd vulnerabilities

Latest debian/minissdpd CVEs

Newest publication first

1. DLA-1805-1 minissdpd - security update

   Published 2019-05-26

   Unknown

2. CVE-2019-12106 The updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and 1.5 allows a remote attacker to crash the process due to a Use After Free vulnerability.

   Published 2019-05-15

   High·CVSS 7.5 EPSS 2.8%

   The updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and 1.5 allows a remote attacker to crash the process due to a Use After Free vulnerability.

3. CVE-2016-3179 The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (invalid free and daemon crash) via vectors related to error handling.

   Published 2017-03-24

   Medium·CVSS 5.5 EPSS 0.32%

   The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (invalid free and daemon crash) via vectors related to error handling.

4. CVE-2016-3178 The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (out-of-bounds memory access and daemon crash) via vectors involving a negative l...

   Published 2017-03-24

   Medium·CVSS 5.5 EPSS 0.32%

   The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (out-of-bounds memory access and daemon crash) via vectors involving a negative length value.

5. DLA-454-1 minissdpd - security update

   Published 2016-05-03

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.