CVE-2021-31718

Опубликовано: 25 апр. 2021

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading to remote code execution.

Ссылки

http://www.openwall.com/lists/oss-security/2021/04/25/2
Mailing List
Third Party Advisory
https://framagit.org/medoc92/npupnp
Third Party Advisory
https://www.lesbonscomptes.com/upmpdcli/npupnp-doc/libnpupnp.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/04/25/2
Mailing List
Third Party Advisory
https://framagit.org/medoc92/npupnp
Third Party Advisory
https://www.lesbonscomptes.com/upmpdcli/npupnp-doc/libnpupnp.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:npupnp_project:npupnp:*:*:*:*:*:*:*:*

Версия до 4.1.4 (исключая)

EPSS

Процентиль: 64%

0.00479

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-346

Связанные уязвимости

GHSA-8jpp-c53f-gvrm

github

больше 3 лет назад