Описание
Security update for miniupnpc
MiniUPnP was updated to fix one security issue.
The following vulnerability was fixed:
- CVE-2015-6031: XML parser buffer overflow (boo#950759)
Список пакетов
openSUSE Leap 42.1
libminiupnpc-devel-1.9-6.1
libminiupnpc10-1.9-6.1
libminiupnpc10-32bit-1.9-6.1
miniupnpc-1.9-6.1
python-miniupnpc-1.9-6.1
Ссылки
- E-Mail link for openSUSE-SU-2015:2070-1
- SUSE Security Ratings
Описание
Buffer overflow in the IGDstartelt function in igd_desc_parse.c in the MiniUPnP client (aka MiniUPnPc) before 1.9.20150917 allows remote UPNP servers to cause a denial of service (application crash) and possibly execute arbitrary code via an "oversized" XML element name.
Затронутые продукты
openSUSE Leap 42.1:libminiupnpc-devel-1.9-6.1
openSUSE Leap 42.1:libminiupnpc10-1.9-6.1
openSUSE Leap 42.1:libminiupnpc10-32bit-1.9-6.1
openSUSE Leap 42.1:miniupnpc-1.9-6.1
Ссылки
- CVE-2015-6031
- SUSE Bug 950759