CVE-2015-6031: Buffer Overflow
Buffer overflow in the IGDstartelt function in igddescparse.c in the MiniUPnP client (aka MiniUPnPc) before 1.9.20150917 allows remote UPNP servers to cause a denial of service (application crash) and possibly execute arbitrary code via an "oversized" XML element name.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6031?
CVE-2015-6031 has a high severity rating due to the potential for remote code execution and denial of service.
How do I fix CVE-2015-6031?
To fix CVE-2015-6031, update to MiniUPnP version 1.9-20150917 or later, which contains the necessary patches.
Which versions of MiniUPnP are affected by CVE-2015-6031?
CVE-2015-6031 affects MiniUPnP versions before 1.9-20150917, including all prior versions.
What types of vulnerabilities are associated with CVE-2015-6031?
CVE-2015-6031 is specifically a buffer overflow vulnerability that can lead to denial of service and potential remote code execution.
Can CVE-2015-6031 be exploited remotely?
Yes, CVE-2015-6031 can be exploited remotely by sending specially crafted oversized XML element names to the MiniUPnP client.