Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that contains a :: (colon colon) in a UDP packet.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade upnp | Dec 10, 2025 | Jan 30, 2013 |
| Gentoo Linux | — | Upgrade net-libs/libupnp. | Oct 30, 2017 | Jan 31, 2013 |
| Libupnp | — | Upgrade UPnP or disable device | Feb 4, 2013 | Jan 31, 2013 |
| Suse | — | Upgrade libupnpUpgrade libupnp6-debuginfo-x86Upgrade libupnp6Upgrade libupnp6-debugsourceUpgrade libupnp6-debuginfo-32bitUpgrade libupnp6-debuginfoUpgrade libupnp6-32bitUpgrade libupnp-develUpgrade libupnp6-x86 | Dec 12, 2013 | Jan 31, 2013 |
| Ubuntu | — | Upgrade libupnpUpgrade libupnp4 | Nov 19, 2024 | Jan 31, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub