Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade upnp | Dec 10, 2025 | Jan 30, 2013 |
| Gentoo Linux | — | Upgrade net-libs/libupnp. | Oct 30, 2017 | Jan 31, 2013 |
| Libupnp | — | Upgrade UPnP or disable device | Feb 4, 2013 | Jan 31, 2013 |
| Suse | — | Upgrade libupnp6Upgrade libupnp6-debuginfo-x86Upgrade libupnp6-debuginfo-32bitUpgrade libupnp6-32bitUpgrade libupnp6-x86Upgrade libupnpUpgrade libupnp6-debuginfoUpgrade libupnp6-debugsourceUpgrade libupnp-devel | Dec 12, 2013 | Jan 31, 2013 |
| Ubuntu | — | Upgrade libupnpUpgrade libupnp4 | Nov 19, 2024 | Jan 31, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub