An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to trick a victim's browser into triggering actions against local UPnP services implemented using this library. Depending on the affected service, this could be used for data exfiltration, data tempering, etc.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2417 advisory.

  - An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A     remote web server can exploit this vulnerability to trick a victim's browser into triggering actions     against local UPnP services implemented using this library. Depending on the affected service, this could     be used for data exfiltration, data tempering, etc. (CVE-2021-33516)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the gupnp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A     remote web server can exploit this vulnerability to trick a victim's browser into triggering actions     against local UPnP services implemented using this library. Depending on the affected service, this could     be used for data exfiltration, data tempering, etc. (CVE-2021-33516)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has gupnp packages installed that are affected by a vulnerability:

  - An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A     remote web server can exploit this vulnerability to trick a victim's browser into triggering actions     against local UPnP services implemented using this library. Depending on the affected service, this could     be used for data exfiltration, data tempering, etc. (CVE-2021-33516)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has gupnp packages installed that are affected by multiple vulnerabilities:

  - The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a     subscription request with a delivery URL on a different network segment than the fully qualified event-     subscription URL, aka the CallStranger issue. (CVE-2020-12695)

  - An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A     remote web server can exploit this vulnerability to trick a victim's browser into triggering actions     against local UPnP services implemented using this library. Depending on the affected service, this could     be used for data exfiltration, data tempering, etc. (CVE-2021-33516)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:2363 advisory.

  - An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A     remote web server can exploit this vulnerability to trick a victim's browser into triggering actions     against local UPnP services implemented using this library. Depending on the affected service, this could     be used for data exfiltration, data tempering, etc. (CVE-2021-33516)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:2363 advisory.

  - An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A     remote web server can exploit this vulnerability to trick a victim's browser into triggering actions     against local UPnP services implemented using this library. Depending on the affected service, this could     be used for data exfiltration, data tempering, etc. (CVE-2021-33516)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has gupnp packages installed that are affected by a vulnerability:

  - An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A     remote web server can exploit this vulnerability to trick a victim's browser into triggering actions     against local UPnP services implemented using this library. Depending on the affected service, this could     be used for data exfiltration, data tempering, etc. (CVE-2021-33516)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2153-1 advisory.

  - An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A     remote web server can exploit this vulnerability to trick a victim's browser into triggering actions     against local UPnP services implemented using this library. Depending on the affected service, this could     be used for data exfiltration, data tempering, etc. (CVE-2021-33516)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of gupnp installed on the remote host is prior to 1.0.2-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1673 advisory.

    A flaw was found in gupnp. DNS rebinding can occur when a victim's browser is used by a remote web server     to trigger actions against local UPnP services including data exfiltration, data tempering, and other     exploits. The highest threat from this vulnerability is to data confidentiality and integrity.
    (CVE-2021-33516)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2153-1 advisory.

  - An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A     remote web server can exploit this vulnerability to trick a victim's browser into triggering actions     against local UPnP services implemented using this library. Depending on the affected service, this could     be used for data exfiltration, data tempering, etc. (CVE-2021-33516)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:0917-1 advisory.

  - An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A     remote web server can exploit this vulnerability to trick a victim's browser into triggering actions     against local UPnP services implemented using this library. Depending on the affected service, this could     be used for data exfiltration, data tempering, etc. (CVE-2021-33516)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2080-1 advisory.

  - An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A     remote web server can exploit this vulnerability to trick a victim's browser into triggering actions     against local UPnP services implemented using this library. Depending on the affected service, this could     be used for data exfiltration, data tempering, etc. (CVE-2021-33516)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2459 advisory.

    GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in     C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible.

    Security Fix(es):

    * gupnp: allows DNS rebinding which could result in tricking browser into triggering actions against local     UPnP services (CVE-2021-33516)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2363 advisory.

  - gupnp: allows DNS rebinding which could result in tricking browser into triggering actions against local     UPnP services (CVE-2021-33516)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2363 advisory.

    GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in     C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible.

    Security Fix(es):

    * gupnp: allows DNS rebinding which could result in tricking browser into triggering actions against local     UPnP services (CVE-2021-33516)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2417 advisory.

    [1.0.2-6]     + gupnp-1.0.3-3
    - Fix DNS rebind issue
    - Resolves: #1964706

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2417-1 advisory.

  - gupnp: allows DNS rebinding which could result in tricking browser into triggering actions against local     UPnP services (CVE-2021-33516)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2417 advisory.

    GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in     C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible.

    Security Fix(es):

    * gupnp: allows DNS rebinding which could result in tricking browser into triggering actions against local     UPnP services (CVE-2021-33516)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2422 advisory.

    GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in     C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible.

    Security Fix(es):

    * gupnp: allows DNS rebinding which could result in tricking browser into triggering actions against local     UPnP services (CVE-2021-33516)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2363 advisory.

    [1.0.6-2]     + gupnp-1.0.6-2
    - Fix DNS rebind issue
    - Resolves: #1964710

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4970-1 advisory.

    It was discovered that GUPnP incorrectly filtered local requests. If a user were tricked into visiting a     malicious website, a remote attacker could possibly use this issue to perform actions against local UPnP     services such as obtaining or altering sensitive information.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
208533	CentOS 7 : gupnp (RHSA-2021:2417)	Nessus	CentOS Local Security Checks	high
166643	EulerOS 2.0 SP3 : gupnp (EulerOS-SA-2022-2613)	Nessus	Huawei Local Security Checks	high
162369	EulerOS 2.0 SP5 : gupnp (EulerOS-SA-2022-1891)	Nessus	Huawei Local Security Checks	high
160775	NewStart CGSL CORE 5.05 / MAIN 5.05 : gupnp Vulnerability (NS-SA-2022-0036)	Nessus	NewStart CGSL Local Security Checks	high
160727	NewStart CGSL MAIN 6.02 : gupnp Multiple Vulnerabilities (NS-SA-2022-0060)	Nessus	NewStart CGSL Local Security Checks	high
160160	EulerOS 2.0 SP8 : gupnp (EulerOS-SA-2022-1568)	Nessus	Huawei Local Security Checks	high
157767	Rocky Linux 8 : gupnp (RLSA-2021:2363)	Nessus	Rocky Linux Local Security Checks	high
157573	AlmaLinux 8 : gupnp (ALSA-2021:2363)	Nessus	Alma Linux Local Security Checks	high
154564	NewStart CGSL CORE 5.04 / MAIN 5.04 : gupnp Vulnerability (NS-SA-2021-0115)	Nessus	NewStart CGSL Local Security Checks	high
151755	openSUSE 15 Security Update : gupnp (openSUSE-SU-2021:2153-1)	Nessus	SuSE Local Security Checks	high
151268	Amazon Linux 2 : gupnp (ALAS-2021-1673)	Nessus	Amazon Linux Local Security Checks	high
151108	SUSE SLED15 / SLES15 Security Update : gupnp (SUSE-SU-2021:2153-1)	Nessus	SuSE Local Security Checks	high
151022	openSUSE 15 Security Update : gupnp (openSUSE-SU-2021:0917-1)	Nessus	SuSE Local Security Checks	high
150880	SUSE SLED12 / SLES12 Security Update : gupnp (SUSE-SU-2021:2080-1)	Nessus	SuSE Local Security Checks	high
150845	RHEL 8 : gupnp (RHSA-2021:2459)	Nessus	Red Hat Local Security Checks	high
150830	CentOS 8 : gupnp (CESA-2021:2363)	Nessus	CentOS Local Security Checks	high
150812	RHEL 8 : gupnp (RHSA-2021:2363)	Nessus	Red Hat Local Security Checks	high
150794	Oracle Linux 7 : gupnp (ELSA-2021-2417)	Nessus	Oracle Linux Local Security Checks	high
150789	Scientific Linux Security Update : gupnp on SL7.x i686/x86_64 (2021:2417)	Nessus	Scientific Linux Local Security Checks	high
150777	RHEL 7 : gupnp (RHSA-2021:2417)	Nessus	Red Hat Local Security Checks	high
150775	RHEL 8 : gupnp (RHSA-2021:2422)	Nessus	Red Hat Local Security Checks	high
150499	Oracle Linux 8 : gupnp (ELSA-2021-2363)	Nessus	Oracle Linux Local Security Checks	high
150130	Ubuntu 20.04 LTS : GUPnP vulnerability (USN-4970-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2021-33516

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high