This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-28302 →

DEBIAN-CVE-2021-28302

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function. ixmlNode_free() will rele...

Original description

The description as published by the source.

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function. ixmlNode_free() will release a child node recursively, which will consume stack space and lead to a crash.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 pupnp-1.8

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

advisory security-tracker.debian.org