CVE-2017-1000494: Buffer Overflow
Published Jan 3, 2018
·Updated
Last updated 25 August 2025
Other sources
Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or possibly have unspecified other impact
— MITRE
Affected Software
3 affected componentsFixes available
Miniupnp Project Miniupnpd<2.0
debian/miniupnpc
2.2.1-12.2.4-12.2.8-22.3.3-2
debian/miniupnpd
2.2.1-12.3.1-12.3.9-2
Remediation
Event History
Jan 3, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Aug 9, 2024
Data Sourced
via Launchpad·10:09 PM
Description
Feb 19, 2026
Data Sourced
via Ubuntu·07:48 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·07:49 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-1000494?
CVE-2017-1000494 has a high severity rating due to its potential to cause Denial of Service and memory corruption.
2
How do I fix CVE-2017-1000494?
To fix CVE-2017-1000494, upgrade miniupnpd to version 2.0 or later.
3
Which versions of miniupnpd are affected by CVE-2017-1000494?
Versions of miniupnpd prior to 2.0 are affected by CVE-2017-1000494.
4
Can CVE-2017-1000494 be exploited remotely?
Yes, CVE-2017-1000494 can be exploited remotely, allowing an attacker to potentially cause a Denial of Service.
5
What systems are vulnerable to CVE-2017-1000494?
Any system running miniupnpd versions lower than 2.0 is vulnerable to CVE-2017-1000494.