Advisories · Technology
pupnp.
Every CVE that names pupnp among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing
- pupnp
- Denial of service
- CVSS 7.1 High
pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling
- pupnp
- Memory corruption
- HTTP request smuggling
- CVSS 7.5 High
libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered
- pupnp
- Denial of service
- CVSS 7.5 High
pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes
- pupnp
- Memory corruption
- CVSS 6.5 Medium
pupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow
- pupnp
- Denial of service
- CVSS 6.9 Medium
pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion
- pupnp
- Server-side request forgery (SSRF)
- CWE-195
- CVSS 7.6 High
DNS rebinding in pupnp
- pupnp
- CWE-20