Описание
Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 1:1.6.22-1 |
| cosmic | not-affected | 1:1.6.22-1 |
| devel | DNE | |
| disco | DNE | |
| eoan | DNE | |
| esm-apps-legacy/xenial | released | 1:1.6.19+git20160116-1ubuntu0.1~esm1 |
| esm-apps/bionic | not-affected | 1:1.6.22-1 |
| esm-apps/xenial | released | 1:1.6.19+git20160116-1ubuntu0.1~esm1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [1:1.6.17-1.2+deb7u1build0.14.04.1]] |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.
Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers ...
Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.
ALT-PU-2016-2493: package `libupnp` update to version 1.6.21-alt1
EPSS
5 Medium
CVSS2
7.5 High
CVSS3