← Back

Pupnp Project

pupnp_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Pupnp
pupnp
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-29462
1Pupnp Project
1Pupnp
Jun 17, 2026
Apr 20, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server part of pupnp (libupnp) appears to be vulnerable to DNS rebinding attacks because it does not check th...Show more
The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server part of pupnp (libupnp) appears to be vulnerable to DNS rebinding attacks because it does not check the value of the `Host` header. This can be mitigated by using DNS revolvers which block DNS-rebinding attacks. The vulnerability is fixed in version 1.14.6 and later.Show less
CVE-2021-28302
1Pupnp Project
1Pupnp
Jun 17, 2026
Mar 12, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function. ixmlNode_free() will release a child node recursively, which will consume stack space and lead...Show more
A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function. ixmlNode_free() will release a child node recursively, which will consume stack space and lead to a crash.Show less