CVE-2014-3985
published 2014-09-11CVE-2014-3985: The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service (crash) via crafted headers that trigger an…
PriorityP424medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
3.31%
87.0th percentile
The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service (crash) via crafted headers that trigger an out-of-bounds read.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | miniupnpc | < miniupnpc 1.6-4 (bookworm) | miniupnpc 1.6-4 (bookworm) |
| miniupnp_project | miniupnp | — | — |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
MiniUPnPc vulnerability
vendor_ubuntu·2014-07-16
CVE-2014-3985 MiniUPnPc vulnerability
Title: MiniUPnPc vulnerability
Summary: MiniUPnPc could be made to crash if it received specially crafted network
traffic.
It was discovered that MiniUPnPc incorrectly handled certain buffer
lengths. A remote attacker could possibly use this issue to cause
applications using MiniUPnPc to crash, resulting in a denial of service.
Instructions: After a standard system update you need to restart your session to make all
the necessary changes.
Debian
CVE-2014-3985: miniupnpc - The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attacke...
vendor_debian·2014·CVSS 5.0
CVE-2014-3985 [MEDIUM] CVE-2014-3985: miniupnpc - The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attacke...
The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service (crash) via crafted headers that trigger an out-of-bounds read.
Scope: local
bookworm: resolved (fixed in 1.6-4)
bullseye: resolved (fixed in 1.6-4)
forky: resolved (fixed in 1.6-4)
sid: resolved (fixed in 1.6-4)
trixie: resolved (fixed in 1.6-4)
GHSA
GHSA-jwgg-6gv4-m9cx: The getHTTPResponse function in miniwget
ghsa_unreviewed·2022-05-13
CVE-2014-3985 [MEDIUM] GHSA-jwgg-6gv4-m9cx: The getHTTPResponse function in miniwget
The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service (crash) via crafted headers that trigger an out-of-bounds read.
OSV
CVE-2014-3985: The getHTTPResponse function in miniwget
osv·2014-09-11·CVSS 5.0
CVE-2014-3985 [MEDIUM] CVE-2014-3985: The getHTTPResponse function in miniwget
The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service (crash) via crafted headers that trigger an out-of-bounds read.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-updates/2014-06/msg00039.htmlhttp://seclists.org/oss-sec/2014/q2/201http://seclists.org/oss-sec/2014/q2/496http://www.securityfocus.com/bid/67152https://bugzilla.redhat.com/show_bug.cgi?id=1085618https://github.com/miniupnp/miniupnp/commit/3a87aa2f10bd7f1408e1849bdb59c41dd63a9fe9https://security.gentoo.org/glsa/201701-41http://lists.opensuse.org/opensuse-updates/2014-06/msg00039.htmlhttp://seclists.org/oss-sec/2014/q2/201http://seclists.org/oss-sec/2014/q2/496http://www.securityfocus.com/bid/67152https://bugzilla.redhat.com/show_bug.cgi?id=1085618https://github.com/miniupnp/miniupnp/commit/3a87aa2f10bd7f1408e1849bdb59c41dd63a9fe9https://security.gentoo.org/glsa/201701-41
2014-09-11
Published