Denial of Service Vulnerability in MiniSSDPd by MiniUPnP
CVE-2016-3178

5.5MEDIUM

Key Information:

Vendor: Miniupnp Project
Status: Minissdpd
Vendor: CVE Published:; 24 March 2017

🔔 Create Miniupnp Project Vulnerability Alert

What is CVE-2016-3178?

The MiniSSDPd processRequest function is susceptible to a denial of service attack due to improper validation of memory access. An attacker with local access can exploit this vulnerability by sending specific requests that include a negative length value, leading to an out-of-bounds memory access and causing the daemon to crash. This vulnerability highlights the need for robust input validation to prevent such weaknesses, ensuring that applications remain secure against local threats.