high8.8
CVE-2021-31718
The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading to remote code exec…
Impact
The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Npupnp Project | Npupnp | before 4.1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2021/04/25/2
- https://framagit.org/medoc92/npupnp
- https://www.lesbonscomptes.com/upmpdcli/npupnp-doc/libnpupnp.html
- http://www.openwall.com/lists/oss-security/2021/04/25/2
- https://framagit.org/medoc92/npupnp
- https://www.lesbonscomptes.com/upmpdcli/npupnp-doc/libnpupnp.html