CVE-2015-20111: Buffer Overflow
miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffer overflow and significant data leak, a different vulnerability than CVE-2019-12107. In Bitcoin Core before 0.12, remote code execution was possible in conjunction with CVE-2015-6031 exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-20111?
CVE-2015-20111 has a high severity due to its potential for remote code execution and significant data leakage.
How do I fix CVE-2015-20111?
To fix CVE-2015-20111, update miniupnp to a version later than 4c90b87 and Bitcoin Core to a version later than 0.12.
What products are affected by CVE-2015-20111?
CVE-2015-20111 affects miniupnp versions before 4c90b87 and Bitcoin Core versions before 0.12.
Is remote code execution possible with CVE-2015-20111?
Yes, remote code execution is possible with CVE-2015-20111 on affected systems.
How does CVE-2015-20111 lead to data leakage?
CVE-2015-20111 leads to data leakage due to buffer overflow caused by insufficient checks on snprintf return values.