This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-13848 →

DEBIAN-CVE-2020-13848

Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NU...

Original description

The description as published by the source.

Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/service_table/service_table.c.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 pupnp-1.8

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

advisory security-tracker.debian.org