Denial of Service Vulnerability in miniupnpd by MiniUPnP
CVE-2017-1000494

7.8HIGH

Key Information:

Vendor: Miniupnp Project
Status: Miniupnpd
Vendor: CVE Published:; 3 January 2018

🔔 Create Miniupnp Project Vulnerability Alert

What is CVE-2017-1000494?

This vulnerability in miniupnpd prior to version 2.0 stems from an uninitialized stack variable in the NameValueParserEndElt function located in upnpreplyparse.c. Malicious actors can exploit this issue to trigger a Denial of Service condition, which may result in segmentation faults and potential memory corruption. The exploitation of this vulnerability can disrupt the normal functions of the affected software, making it critical for administrators to apply patches and updates promptly.