critical9.8Public exploit code
CVE-2017-8798
Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified oth…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MiniUPnP MiniUPnPc < 2.0 - Remote Denial of Service2017-05-11 · dos · multiple
Impact
Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Miniupnp Project | Miniupnpd | Versions 1.4, 1.5, 1.7, 1.8, 1.9, 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://miniupnp.free.fr/files/changelog.php?file=miniupnpc-2.0.20170509.tar.gz
- https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-8798
- https://lists.debian.org/debian-lts-announce/2020/04/msg00027.html
- http://miniupnp.free.fr/files/changelog.php?file=miniupnpc-2.0.20170509.tar.gz
- https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-8798
- https://lists.debian.org/debian-lts-announce/2020/04/msg00027.html