Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified other impact.

It was discovered that there was a integer signedness error in the miniupnpc UPnP client that could allow remote attackers to cause a denial of service attack.

For Debian 8 'Jessie', this problem has been fixed in version 1.9.20140610-2+deb8u2.

We recommend that you upgrade your miniupnpc packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for miniupnpc fixes the following issues :

  - CVE-2017-8798: Integer signedness error in miniupnpc     allows remote attackers to cause a denial of service     condition via specially crafted HTTP response     (boo#1038601)

USN-3298-1 fixed a vulnerability in MiniUPnP. This update provides the corresponding update for Ubuntu 17.04.

It was discovered that MiniUPnP incorrectly handled memory. A remote attacker could use this issue to cause a denial of service or possibly execute arbitrary code with privileges of the user running an application that uses the MiniUPnP library.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3298-1 advisory.

    It was discovered that MiniUPnP incorrectly handled memory. A remote attacker could use this issue to     cause a denial of service or possibly execute arbitrary code with privileges of the user running an     application that uses the MiniUPnP library.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Tintinweb reports :

An integer signedness error was found in miniupnp's miniwget allowing an unauthenticated remote entity typically located on the local network segment to trigger a heap corruption or an access violation in miniupnp's http response parser when processing a specially crafted chunked-encoded response to a request for the xml root description url.

It was discovered that there was a integer signedness error in the miniupnpc UPnP client that could allow remote attackers to cause a denial of service attack.

For Debian 7 'Wheezy', this issue has been fixed in miniupnpc version 1.5-2+deb7u2.

We recommend that you upgrade your miniupnpc packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
136206	Debian DLA-2197-1 : miniupnpc security update	Nessus	Debian Local Security Checks	critical
100566	openSUSE Security Update : miniupnpc (openSUSE-2017-638)	Nessus	SuSE Local Security Checks	critical
100415	Ubuntu 17.04 : miniupnpc vulnerability (USN-3298-2)	Nessus	Ubuntu Local Security Checks	critical
100414	Ubuntu 14.04 LTS / 16.04 LTS : MiniUPnP vulnerability (USN-3298-1)	Nessus	Ubuntu Local Security Checks	critical
100340	FreeBSD : miniupnpc -- integer signedness error (da1d5d2e-3eca-11e7-8861-0018fe623f2b)	Nessus	FreeBSD Local Security Checks	critical
100330	Debian DLA-949-1 : miniupnpc security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2017-8798

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical