Approved changes feed: RSS · Atom
cpe:2.3:a:miniupnp_project:miniupnpd:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Miniupnp Project (ae0fc775-8a7c-51a8-af90-056b227265ad) |
|---|---|
| Product | Miniupnpd (1ae4551e-6417-5edf-a56b-9c91f942bde8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/miniupnpd |
purl2cpe | 2026-06-01 10:11:47.297581 |
pkg:deb/ubuntu/miniupnpd |
purl2cpe | 2026-06-01 10:11:47.297584 |
pkg:github/miniupnp/miniupnp |
purl2cpe | 2026-06-01 10:11:47.297587 |
pkg:rpm/fedora/miniupnpd |
purl2cpe | 2026-06-01 10:11:47.297590 |
pkg:rpm/opensuse/miniupnpd |
purl2cpe | 2026-06-01 10:11:47.297592 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5720 |
vulnerable | 2026-06-08 08:07:04.021552 |
miniupnpd Integer Underflow SOAPAction Header Parsing
miniupnpd contains an integer underflow vulnerability in SOAPAction header parsing that allows remote attackers to cause a denial of service or information disclosure by sending a malformed SOAPAction header with a single quote. Attackers can trigger an out-of-bounds memory read by exploiting improper length validation in ParseHttpHeaders(), where the parsed length underflows to a large unsigned value when passed to memchr(), causing the process to scan memory far beyond the allocated HTTP request buffer.
Published: 2026-04-17T21:39:54.818Z
Updated: 2026-07-14T22:03:02.259Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12111 |
vulnerable | 2026-06-08 05:12:38.563057 |
Details available
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in copyIPv6IfDifferent in pcpserver.c.
Published: 2019-05-15T22:23:27.000Z
Updated: 2024-08-04T23:10:30.498Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12109 |
vulnerable | 2026-06-08 05:12:38.562249 |
Details available
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for rem_port.
Published: 2019-05-15T22:23:11.000Z
Updated: 2024-08-04T23:10:30.519Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12108 |
vulnerable | 2026-06-08 05:12:38.561670 |
Details available
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for int_port.
Published: 2019-05-15T22:23:03.000Z
Updated: 2024-08-04T23:10:30.524Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000494 |
vulnerable | 2026-06-08 05:08:34.710842 |
Details available
Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact
Published: 2018-01-03T14:00:00.000Z
Updated: 2024-08-05T22:00:41.614Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0229 |
vulnerable | 2026-06-08 05:03:46.231987 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.