MiniUPnPc: Buffer overflow

MiniUPnPc: Buffer overflow A buffer overflow in MiniUPnPc might allow remote attackers to cause a Denial of Service condition. miniupnpc 2017-01-17 2017-01-17 512666 remote 1.9.20150427 1.9.20150427

UPnP client library and a simple UPnP client.

An out-of-bounds read was discovered in the getHTTPResponse function in miniwget.c in MiniUPnPc.

Remote attackers, through specially crafted headers, could cause a Denial of Service condition.

There is no known workaround at this time.

All MiniUPnPc users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=net-libs/miniupnpc-1.9.20150427"

CVE-2014-3985 whissi b-man