 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| CVE ID: | CVE-2015-6031 |
| Description: | Buffer overflow in the IGDstartelt function in igd_desc_parse.c in the MiniUPnP client (aka MiniUPnPc) before 1.9.20150917 allows remote UPNP servers to cause a denial of service (application crash) and possibly execute arbitrary code via an "oversized" XML element name. |
| Test IDs: | 1.3.6.1.4.1.25623.1.0.131125 1.3.6.1.4.1.25623.1.0.842502 1.3.6.1.4.1.25623.1.0.842497 1.3.6.1.4.1.25623.1.0.703379 |
| Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2015-6031 BugTraq ID: 77306 http://www.securityfocus.com/bid/77306 Debian Security Information: DSA-3379 (Google Search) http://www.debian.org/security/2015/dsa-3379 https://security.gentoo.org/glsa/201801-08 http://talosintel.com/reports/TALOS-2015-0035/ SuSE Security Announcement: openSUSE-SU-2015:2070 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-11/msg00122.html http://www.ubuntu.com/usn/USN-2780-1 http://www.ubuntu.com/usn/USN-2780-2 |