Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
https://lists.debian.org/debian-lts-announce/2020/04/msg00027.html
https://github.com/tintinweb/pub/tree/master/pocs/cve-2017-8798
http://miniupnp.free.fr/files/changelog.php?file=miniupnpc-2.0.20170509.tar.gz