high7.5
CVE-2019-14323
SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte.
Impact
SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte. This results in a crash of the server, but only when strict stack checking is enabled. This is caused by an off-by-one error in ssdp_recv in ssdpd.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simple Service Discovery Protocol Responder Project | Simple Service Discovery Protocol Responder | from 1.0 through 1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/troglobit/ssdp-responder/commit/ce04b1f29a137198182f60bbb628d5ceb8171765
- https://github.com/troglobit/ssdp-responder/issues/1
- https://github.com/troglobit/ssdp-responder/commit/ce04b1f29a137198182f60bbb628d5ceb8171765
- https://github.com/troglobit/ssdp-responder/issues/1