MiniUPnP CVE-2017-8798 Remote Denial of Service Vulnerability

Bugtraq ID:	98656
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-8798
Remote:	Yes
Local:	No
Published:	May 01 2017 12:00AM
Updated:	May 01 2017 12:00AM
Credit:	Tintinweb Team
Vulnerable:	Ubuntu Ubuntu Linux 17.04 Ubuntu Ubuntu Linux 16.10 Ubuntu Ubuntu Linux 16.04 LTS Ubuntu Ubuntu Linux 14.04 LTS MiniUPnP Project MiniUPnP 2.0 MiniUPnP Project MiniUPnP 1.9 MiniUPnP Project MiniUPnP 1.8 MiniUPnP Project MiniUPnP 1.7 MiniUPnP Project MiniUPnP 1.4.20101221 MiniUPnP Project MiniUPnP 1.4
Not Vulnerable:

MiniUPnP CVE-2017-8798 Remote Denial of Service Vulnerability

MiniUPnP is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected application, resulting in denial-of-service conditions. Due to the nature of this issue, arbitrary code execution is possible but this has not been confirmed.

MiniUPnP versions 1.4.20101221 through 2.0 are vulnerable.

MiniUPnP CVE-2017-8798 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

MiniUPnP CVE-2017-8798 Remote Denial of Service Vulnerability

References:

• MiniUPnP Project HomePage (MiniUPnP)
  
• miniupnpc: Fix CVE-2017-8798 (MiniUPnP)
  
• Update cve-2017-8798 (MiniUPnP)