Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libupnp | Dec 19, 2016 | Dec 16, 2016 |
| Freebsd | — | Upgrade upnp | Dec 10, 2025 | Dec 27, 2016 |
| Gentoo Linux | — | Upgrade net-libs/libupnp. | Oct 30, 2017 | Mar 7, 2017 |
| Suse | — | Upgrade libupnp-develUpgrade libupnp6Upgrade libupnp6-32bitUpgrade libupnp-debugsourceUpgrade libupnp6-debuginfo-32bitUpgrade libupnp6-debuginfo | Jun 6, 2017 | Dec 16, 2016 |
| Ubuntu | — | Upgrade libupnp6 (Ubuntu Pro) | Mar 22, 2023 | Mar 7, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub