CVE Feed

    Dashboard / CVE / CVE-2012-5958

    CVE-2012-5958

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction.

    Published:Jan 29, 2013
    Last Modified:Apr 11, 2025
    EPS:Jan 31, 2013
    EPSS Score:0.88128
    CVSS Score:10

    Affected Products

    Vendor
    Libupnp Project
    Product
    Libupnp

    Exploits

    http://www.securityfocus.com/bid/57602http://www.securityfocus.com/bid/57602https://www.exploit-db.com/exploits/49119https://github.com/hmrumman777-beep/NetAudit-IoThttps://github.com/lochiiconnectivity/vulnupnphttps://www.exploit-db.com/exploits/24455

    References

    http://lists.opensuse.org/opensuse-updates/2013-02/msg00013.html
    http://packetstormsecurity.com/files/160242/libupnp-1.6.18-Denial-Of-Service.html
    http://pupnp.sourceforge.net/ChangeLog
    http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp
    http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf
    http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf
    http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf
    http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf
    http://www.debian.org/security/2013/dsa-2614
    http://www.debian.org/security/2013/dsa-2615
    http://www.kb.cert.org/vuls/id/922681
    http://www.mandriva.com/security/advisories?name=MDVSA-2013:098
    http://www.securityfocus.com/bid/57602
    https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play
    https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf
    https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb
    https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037
    https://www.tenable.com/security/research/tra-2017-10
    http://lists.opensuse.org/opensuse-updates/2013-02/msg00013.html
    http://packetstormsecurity.com/files/160242/libupnp-1.6.18-Denial-Of-Service.html
    http://pupnp.sourceforge.net/ChangeLog
    http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130129-upnp
    http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf
    http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf
    http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf
    http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf
    http://www.debian.org/security/2013/dsa-2614
    http://www.debian.org/security/2013/dsa-2615
    http://www.kb.cert.org/vuls/id/922681
    http://www.mandriva.com/security/advisories?name=MDVSA-2013:098
    http://www.securityfocus.com/bid/57602
    https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play
    https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf
    https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb
    https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037
    https://www.tenable.com/security/research/tra-2017-10

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High