Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 21.10, 20.04, 18.04 LTS: USN-4971-1 Low GUPnP Vulnerability Released

ubuntu
Calendar Grey June 1, 2021
Dist Ubuntu Esm H88
The GUPnP framework presents unforeseen vulnerabilities in network service exposure, impacting Ubuntu versions 21.04, 20.10, and 20.04 LTS. It is advisable to implement updates.
GUPnP could allow unintended access to network services.

Summary

GUPnP could allow unintended access to network services.

Software Description:

- gupnp: framework for creating UPnP devices and control points

Details:

It was discovered that GUPnP incorrectly filtered local requests. If a user

were tricked into visiting a malicious website, a remote attacker could

possibly use this issue to perform actions against local UPnP services such

as obtaining or altering sensitive information.

Topics%20covered

Topics Covered

security advisory moderate access issue ubuntu network access gupnp

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.04:
  libgupnp-1.2-0                  1.2.4-1ubuntu0.21.04.1

Ubuntu 20.10:
  libgupnp-1.2-0                  1.2.4-1ubuntu0.20.10.1

Ubuntu 20.04 LTS:
  libgupnp-1.2-0                  1.2.3-0ubuntu0.20.04.2

After a standard system update you need to reboot your computer to make all
the necessary changes.

References

https://ubuntu.com/security/notices/USN-4970-1

CVE-2021-33516

Severity
low
Lowest
Low
Medium
High
Critical

June 01, 2021

Topics%20covered

Topics Covered

security advisory moderate access issue ubuntu network access gupnp

Package Information

https://launchpad.net/ubuntu/+source/gupnp/1.2.4-1ubuntu0.21.04.1
https://launchpad.net/ubuntu/+source/gupnp/1.2.4-1ubuntu0.20.10.1
https://launchpad.net/ubuntu/+source/gupnp/1.2.3-0ubuntu0.20.04.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here