Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Debian 10: DLA-3465-1 Critical: Minidlna Buffer Overflow DoS Risk

debian lts
Calendar Grey June 21, 2023
Dist Debian Esm H88
Debian LTS Advisory DLA-3466-1 released concerning minidlna, tackling a severe buffer overflow vulnerability discovered in HTTP chunk handling.
A heap-based buffer overflow vulnerability was found in the HTTP chunk parsing code of minidlna, a lightweight DLNA/UPnP-AV server, which may result in denial of service or the exe...
Topics%20covered

Topics Covered

security advisory denial of service buffer overflow debian application update minidlna

Summary

A heap-based buffer overflow vulnerability was found in the HTTP chunk
parsing code of minidlna, a lightweight DLNA/UPnP-AV server, which may
result in denial of service or the execution of arbitrary code.


For Debian 10 buster, this problem has been fixed in version
1.2.1+dfsg-2+deb10u4.

We recommend that you upgrade your minidlna packages.

For the detailed security status of minidlna please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/minidlna

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: minidlna
Version: 1.2.1+dfsg-2+deb10u4
CVE ID: CVE-2023-33476

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow debian application update minidlna

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here