CVE-2014-3985: Buffer Overflow
miniupnpc-1.8-1.fc20 miniupnpc-1.8-1.fc19
http://miniupnp.free.fr/files/changelog.php?file=miniupnpc-1.9.20140401.tar.gz 2013/10/07: fixed potential buffer overrun in miniwget.c Modified UPNPGetValidIGD() to check for ExternalIpAddress
https://github.com/miniupnp/miniupnp/commit/3a87aa2f10bd7f1408e1849bdb59c41dd63a9fe9
Appears to be a DoS crash vector that can be triggered by something on the network.
Other sources
The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service (crash) via crafted headers that trigger an out-of-bounds read.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3985?
CVE-2014-3985 is classified as having a medium severity due to potential buffer overflow vulnerabilities.
How do I fix CVE-2014-3985?
To fix CVE-2014-3985, upgrade to miniupnpc version 1.9 or later.
What software is affected by CVE-2014-3985?
CVE-2014-3985 affects miniupnpc versions below 1.9, particularly on distributions like Fedora and openSUSE.
What is the nature of the vulnerability in CVE-2014-3985?
CVE-2014-3985 involves a potential buffer overrun in the miniwget component of the miniupnpc library.
Is there a workaround for CVE-2014-3985 if I cannot update immediately?
While upgrading is the best solution, users can limit access to the affected software or utilize firewalls to mitigate risks until an update is applied.