CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
Percentile
99.0%
Stack-based buffer overflow in the unique_service_name function in
ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices
(aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote
attackers to execute arbitrary code via a long UDN (aka uuid) field within
a string that lacks a :: (colon colon) in a UDP packet.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 10.04 | noarch | libupnp | < 1:1.6.6-4ubuntu0.1 | UNKNOWN |
ubuntu | 11.10 | noarch | libupnp | < 1:1.6.6-5.1ubuntu0.11.10.1 | UNKNOWN |
ubuntu | 12.04 | noarch | libupnp | < 1:1.6.6-5.1ubuntu0.12.04.1 | UNKNOWN |
ubuntu | 12.10 | noarch | libupnp | < 1.6.17-1.1ubuntu0.12.10.1 | UNKNOWN |
ubuntu | 11.10 | noarch | libupnp4 | < 1.8.0~svn20100507-1.1ubuntu0.11.10.1 | UNKNOWN |
ubuntu | 12.04 | noarch | libupnp4 | < 1.8.0~svn20100507-1.1ubuntu0.12.04.1 | UNKNOWN |
ubuntu | 12.10 | noarch | libupnp4 | < 1.8.0~svn20100507-1.1ubuntu0.12.10.1 | UNKNOWN |