Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Debian 9: DLA-2489-1 Critical Minidlna Arbitrary Code Execution

debian lts
Calendar Grey December 10, 2020
Dist Debian Esm H88
Debian LTS Advisory DLA-2490-1 highlights a security update for the gimp package, focusing on vulnerabilities that could lead to unauthorized access and data corruption.
It was discovered that missing input validation in minidlna, a lightweight DLNA/UPnP-AV server could result in the execution of arbitrary code
Topics%20covered

Topics Covered

security advisory critical debian arbitrary code execution input validation minidlna upnp vulnerability

Summary

It was discovered that missing input validation in minidlna, a lightweight
DLNA/UPnP-AV server could result in the execution of arbitrary code. In
addition minidlna was susceptible to the "CallStranger" UPnP
vulnerability.


For Debian 9 stretch, these problems have been fixed in version
1.1.6+dfsg-1+deb9u1.

We recommend that you upgrade your minidlna packages.

For the detailed security status of minidlna please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/minidlna

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: minidlna
Version: 1.1.6+dfsg-1+deb9u1
CVE ID: CVE-2020-12695 CVE-2020-28926

Topics%20covered

Topics Covered

security advisory critical debian arbitrary code execution input validation minidlna upnp vulnerability

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here