Approved changes feed: RSS · Atom

cpe:2.3:a:miniupnp_project:miniupnpd:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorMiniupnp Project (ae0fc775-8a7c-51a8-af90-056b227265ad)
ProductMiniupnpd (1ae4551e-6417-5edf-a56b-9c91f942bde8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/miniupnpd purl2cpe 2026-06-01 10:11:47.297580
pkg:deb/ubuntu/miniupnpd purl2cpe 2026-06-01 10:11:47.297583
pkg:github/miniupnp/miniupnp purl2cpe 2026-06-01 10:11:47.297586
pkg:rpm/fedora/miniupnpd purl2cpe 2026-06-01 10:11:47.297588
pkg:rpm/opensuse/miniupnpd purl2cpe 2026-06-01 10:11:47.297591

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1462 vulnerable 2026-06-08 05:03:54.056401 Details available
Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (incorrect memory copy) via a SOAPAction header that lacks a " (double quote) character, a different vulnerability than CVE-2013-0230.
Published: 2013-01-31T21:00:00.000Z
Updated: 2024-08-06T15:04:49.256Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1461 vulnerable 2026-06-08 05:03:54.056113 Details available
The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and service crash) via a SOAPAction header that lacks a # (pound sign) character, a different vulnerability than CVE-2013-0230.
Published: 2013-01-31T21:00:00.000Z
Updated: 2024-08-06T15:04:48.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0230 vulnerable 2026-06-08 05:03:46.234136 Details available
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.
Published: 2013-01-31T21:00:00.000Z
Updated: 2024-08-06T14:18:09.494Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0229 vulnerable 2026-06-08 05:03:46.232663 Details available
The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a crafted request that triggers a buffer over-read.
Published: 2013-01-31T21:00:00.000Z
Updated: 2024-08-06T14:18:09.628Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.