GCVE - cpe:2.3:a:readymedia_project:readymedia:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:readymedia_project:readymedia:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Readymedia Project (`313e01fb-b0d3-5113-9408-cfddf1884c26`)
Product	Readymedia (`20c4beef-323f-51b1-bef0-e70bfcdde9c8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/minidlna`	purl2cpe	2026-06-01 10:15:29.715028
`pkg:deb/ubuntu/minidlna`	purl2cpe	2026-06-01 10:15:29.715032
`pkg:docker/geekduck/docker-minidlna`	purl2cpe	2026-06-01 10:15:29.715035
`pkg:github/azatoth/minidlna`	purl2cpe	2026-06-01 10:15:29.715039
`pkg:github/nathanaela/minidlna`	purl2cpe	2026-06-01 10:15:29.715043
`pkg:rpm/opensuse/minidlna`	purl2cpe	2026-06-01 10:15:29.715047
`pkg:sourceforge/minidlna`	purl2cpe	2026-06-01 10:15:29.715050

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-33476`	vulnerable	2026-06-08 06:06:23.202841	Details available ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values that exceed the length of the allocated buffer, resulting in out-of-bounds read/write. Published: 2023-06-02T00:00:00.000Z Updated: 2025-01-08T20:33:54.461Z Open on db.gcve.eu Reference links https://sourceforge.net/projects/minidlna/ https://blog.coffinsec.com/0day/2023/05/31/minidlna-heap-overflow-rca.html https://sourceforge.net/p/minidlna/git/ci/9bd58553fae5aef3e6dd22f51642d2c851225aec/ https://lists.debian.org/debian-lts-announce/2023/06/msg00027.html https://www.debian.org/security/2023/dsa-5434	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-26505`	vulnerable	2026-06-08 05:41:52.296937	Details available A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files. Published: 2022-03-06T00:00:00.000Z Updated: 2024-08-03T05:03:32.899Z Open on db.gcve.eu Reference links https://www.openwall.com/lists/oss-security/2022/03/03/1 https://sourceforge.net/p/minidlna/git/ci/c21208508dbc131712281ec5340687e5ae89e940/ http://www.openwall.com/lists/oss-security/2022/03/06/1 https://lists.debian.org/debian-lts-announce/2022/04/msg00005.html https://security.gentoo.org/glsa/202311-12	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-28926`	vulnerable	2026-06-08 05:23:56.606415	Details available ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove. Published: 2020-11-30T17:09:40.000Z Updated: 2024-08-04T16:40:59.981Z Open on db.gcve.eu Reference links https://sourceforge.net/projects/minidlna/ https://www.rootshellsecurity.net/remote-heap-corruption-bug-discovery-minidlna/ https://www.debian.org/security/2020/dsa-4806 https://lists.debian.org/debian-lts-announce/2020/12/msg00017.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2739`	vulnerable	2026-06-08 05:04:27.729111	Details available MiniDLNA has heap-based buffer overflow Published: 2019-11-01T12:09:28.000Z Updated: 2024-08-06T15:44:33.539Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2013-2739 http://archives.neohapsis.com/archives/bugtraq/2013-07/0100.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2738`	vulnerable	2026-06-08 05:04:27.728664	Details available minidlna has SQL Injection that may allow retrieval of arbitrary files Published: 2019-11-01T12:00:40.000Z Updated: 2024-08-06T15:44:33.559Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2013-2738 http://archives.neohapsis.com/archives/bugtraq/2013-07/0100.html http://media.blackhat.com/bh-us-12/Briefings/Cutlip/BH_US_12_Cutlip_SQL_Exploitation_WP.pdf https://www.securityfocus.com/archive/1/527299/30/0	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Readymedia

Notes

PURL mappings

Vulnerability references

Contribute