CVE-2020-13848

Katalog CVE

CVSS 7.5 · High EPSS 3,5%

Kerentanan NULL Pointer Dereference pada libupnp project libupnp, debian linux. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/service_table/service_table.c.

Rincian

Terbit di NVD

4 Juni 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

3,5% peluang dieksploitasi; lebih tinggi dari 88,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/pupnp/pupnp/commit/c805c1de1141cb22f74c0d94dd5664bda37398e0 patch · advisory pihak ketiga
• https://github.com/pupnp/pupnp/issues/177 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/06/msg00006.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00030.html
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00033.html
• https://lists.debian.org/debian-lts-announce/2021/03/msg00007.html