Vulnerabilities > Libupnp Project > Libupnp > 1.6.23

DATE CVE VULNERABILITY TITLE RISK
2020-06-04 CVE-2020-13848 NULL Pointer Dereference vulnerability in multiple products
Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/service_table/service_table.c.
network
low complexity
libupnp-project debian CWE-476
5.0