Ubuntu 16.10, 16.04 LTS, 14.04 LTS: USN-3298-1 Moderate: MiniUPnP DoS

ubuntu

May 24, 2017

MiniUPnP could be made to crash or run programs if it received specially crafted network traffic.

Summary

MiniUPnP could be made to crash or run programs if it received specially

crafted network traffic.

Software Description:

- miniupnpc: UPnP IGD client lightweight library

Details:

It was discovered that MiniUPnP incorrectly handled memory. A remote

attacker could use this issue to cause a denial of service or possibly

execute arbitrary code with privileges of the user running an application

that uses the MiniUPnP library.

Topics Covered

security advisory denial of service software update Ubuntu network attack miniupnpc

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
  libminiupnpc10                  1.9.20140610-2ubuntu2.16.10.1

Ubuntu 16.04 LTS:
  libminiupnpc10                  1.9.20140610-2ubuntu2.16.04.1

Ubuntu 14.04 LTS:
  libminiupnpc8                   1.6-3ubuntu2.14.04.3

In general, a standard system update will make all the necessary changes.