Buffer Over-read Vulnerability in MiniUPnP MiniUPnPd by MiniUPnP
CVE-2013-0229
Currently unrated
Key Information:
- Vendor
Miniupnp Project
- Status
- Vendor
- CVE Published:
- 31 January 2013
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 74%
What is CVE-2013-0229?
The ProcessSSDPRequest function in the minissdp.c file of the SSDP handler in MiniUPnP MiniUPnPd prior to version 1.4 is vulnerable to a buffer over-read issue. This vulnerability allows remote attackers to exploit the service by sending specially crafted requests, potentially leading to a denial of service due to service crashes. Organizations using affected versions are encouraged to upgrade to the latest version to mitigate the risk associated with this vulnerability.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.