CVE-2020-28926: Buffer Overflow
Published Nov 30, 2020
·Updated
ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove.
Affected Software
10 affected componentsFixes available
debian/minidlna<=1.2.1+dfsg-1, <=1.2.1+dfsg-2
1.2.1+dfsg-2+deb10u11.2.1+dfsg-3
ubuntu/minidlna<1.2.1+dfsg-1ubuntu0.18.04.1
1.2.1+dfsg-1ubuntu0.18.04.1
ubuntu/minidlna<1.2.1+dfsg-1ubuntu0.20.04.1
1.2.1+dfsg-1ubuntu0.20.04.1
ubuntu/minidlna<1.2.1+dfsg-2ubuntu0.1
1.2.1+dfsg-2ubuntu0.1
ubuntu/minidlna<1.3.0
1.3.0
ubuntu/minidlna<1.1.5+dfsg-2ubuntu0.1
1.1.5+dfsg-2ubuntu0.1
debian/minidlna
1.3.0+dfsg-2+deb11u21.3.0+dfsg-2.2+deb12u11.3.3+dfsg-1.1
Readymedia Project Readymedia<1.3.0
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Event History
Nov 30, 2020
CVE Published
via Ubuntu·12:00 AM
CVE Published
via MITRE·05:09 PM
Data Sourced
via MITRE·05:09 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:48 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-28926?
The severity of CVE-2020-28926 is critical with a CVSS score of 9.8.
2
How can remote code execution be performed in CVE-2020-28926?
Remote code execution can be performed in CVE-2020-28926 by sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding.
3
What leads to a buffer overflow in CVE-2020-28926?
A signedness bug resulting in a buffer overflow in calls to memcpy/memmove leads to the vulnerability in CVE-2020-28926.
4
How can I fix CVE-2020-28926?
To fix CVE-2020-28926, make sure you are using ReadyMedia (aka MiniDLNA) version 1.3.0 or higher.