| Vulnerability Name: | CVE-2016-3179 (CCN-111556) | ||||||||||||||||||||||||||||||||||||||||
| Assigned: | 2016-03-04 | ||||||||||||||||||||||||||||||||||||||||
| Published: | 2016-03-04 | ||||||||||||||||||||||||||||||||||||||||
| Updated: | 2021-04-19 | ||||||||||||||||||||||||||||||||||||||||
| Summary: | The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (invalid free and daemon crash) via vectors related to error handling. | ||||||||||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) 4.9 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:U/RC:R)
3.5 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:U/RC:R)
| ||||||||||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
| ||||||||||||||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-416 | ||||||||||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||||||||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2016-3179 Source: CCN Type: MiniSSDPd Web site MiniUPnP Project Source: CCN Type: oss-sec Mailing List, Mon, 7 Mar 2016 13:04:50 +0100 CVE Request: The minissdpd (v 1.2.20130907-3) is affected by an improper validation of array index weakness Source: CCN Type: oss-sec Mailing List, Wed, 16 Mar 2016 13:46:22 -0400 (EDT) Re: CVE Request: The minissdpd (v 1.2.20130907-3) is affected by an improper validation of array index weakness Source: CCN Type: Salva Peiro Security Advisory SPADV2016-02 The minissdpd daemon (1.2.20130907-3) is affected by an improper validation of array index weakness (CWE-129) Source: MISC Type: Patch, Third Party Advisory http://speirofr.appspot.com/files/advisory/SPADV-2016-02.md Source: MLIST Type: Mailing List, Patch, Third Party Advisory [oss-security] 20160316 Re: CVE Request: The minissdpd (v 1.2.20130907-3) is affected by an improper validation of array index weakness Source: CCN Type: Debian Bug report logs - 816759 minissdpd: CVE-2016-3178 CVE-2016-3179 Source: CONFIRM Type: Issue Tracking, Patch, Third Party Advisory https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816759 Source: XF Type: UNKNOWN minissdpd-cve20163179-bo(111556) Source: CONFIRM Type: Issue Tracking, Patch, Third Party Advisory https://github.com/miniupnp/miniupnp/commit/140ee8d2204b383279f854802b27bdb41c1d5d1a Source: CCN Type: WhiteSource Vulnerability Database CVE-2016-3179 | ||||||||||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||||||||||