Vulnerabilities > Miniupnp Project > Miniupnpd > 1.8

DATE CVE VULNERABILITY TITLE RISK
2019-11-01 CVE-2013-2600 Information Exposure vulnerability in multiple products
MiniUPnPd has information disclosure use of snprintf()
network
low complexity
miniupnp-project debian CWE-200
5.0
2019-05-15 CVE-2019-12111 NULL Pointer Dereference vulnerability in multiple products
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in copyIPv6IfDifferent in pcpserver.c.
network
low complexity
miniupnp-project debian CWE-476
5.0
2019-05-15 CVE-2019-12109 NULL Pointer Dereference vulnerability in Miniupnp Project Miniupnpd
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for rem_port.
network
low complexity
miniupnp-project CWE-476
5.0
2019-05-15 CVE-2019-12108 NULL Pointer Dereference vulnerability in Miniupnp Project Miniupnpd
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for int_port.
network
low complexity
miniupnp-project CWE-476
5.0
2018-01-03 CVE-2017-1000494 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Miniupnp Project Miniupnpd
Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact
local
low complexity
miniupnp-project CWE-119
4.6
2017-05-11 CVE-2017-8798 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Miniupnp Project Miniupnpd
Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
network
low complexity
miniupnp-project CWE-119
7.5