Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Mageia 8 MGASA-2022-0391 Critical: Minidlna DNS Rebinding

mageia
Calendar Grey October 28, 2022
Dist Mageia Esm H88
Recent updates to minidlna packages rectify a critical DNS rebinding vulnerability that puts media files at risk on Mageia platforms.
A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files

Summary

A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files. (CVE-2022-26505)

References

- https://bugs.mageia.org/show_bug.cgi?id=30115

- https://www.openwall.com/lists/oss-security/2022/03/03/1

- https://www.openwall.com/lists/oss-security/2022/03/06/1

-

- https://lists.debian.org/debian-lts-announce/2022/04/msg00005.html

- https://www.cve.org/CVERecord?id=CVE-2022-26505

Topics%20covered

Topics Covered

security advisory remote access DNS issue Mageia minidlna media file exfiltration

Resolution

SRPMS

- 8/core/minidlna-1.3.2-1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 28 Oct 2022
URL: https://advisories.mageia.org/MGASA-2022-0391.html
Type: security
CVE: CVE-2022-26505

Topics%20covered

Topics Covered

security advisory remote access DNS issue Mageia minidlna media file exfiltration

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here