Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Debian: DSA-3379-1 Critical: Miniupnpc Buffer Overflow Remote Threat

debian
Calendar Grey October 25, 2015
Debian Logo
The security announcement DSA-3379-1 for Debian addresses a critical buffer overflow vulnerability in miniupnpc, reducing the potential for exploitation from distant threats.
Aleksandar Nikolic of Cisco Talos discovered a buffer overflow vulnerability in the XML parser functionality of miniupnpc, a UPnP IGD client lightweight library
Topics%20covered

Topics Covered

security advisory update buffer overflow remote exploit critical debian miniupnpc

Summary

For the oldstable distribution (wheezy), this problem has been fixed
in version 1.5-2+deb7u1.

For the stable distribution (jessie), this problem has been fixed in
version 1.9.20140610-2+deb8u1.

For the unstable distribution (sid), this problem will be fixed soon.

We recommend that you upgrade your miniupnpc packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: miniupnpc
CVE ID: CVE-2015-6031

Topics%20covered

Topics Covered

security advisory update buffer overflow remote exploit critical debian miniupnpc

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.