Vulnerabilities > Miniupnp Project > Miniupnpd > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2019-11-01 | CVE-2013-2600 | Information Exposure vulnerability in multiple products MiniUPnPd has information disclosure use of snprintf() | 7.5 |
2019-05-15 | CVE-2019-12111 | NULL Pointer Dereference vulnerability in multiple products A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in copyIPv6IfDifferent in pcpserver.c. | 7.5 |
2019-05-15 | CVE-2019-12109 | NULL Pointer Dereference vulnerability in Miniupnp Project Miniupnpd A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for rem_port. | 7.5 |
2019-05-15 | CVE-2019-12108 | NULL Pointer Dereference vulnerability in Miniupnp Project Miniupnpd A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for int_port. | 7.5 |
2019-05-15 | CVE-2019-12106 | Use After Free vulnerability in Miniupnp Project Miniupnpd 1.4/1.5 The updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and 1.5 allows a remote attacker to crash the process due to a Use After Free vulnerability. | 7.5 |
2018-01-03 | CVE-2017-1000494 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Miniupnp Project Miniupnpd Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact | 7.8 |