Security Advisory

CVE-2020-13848

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-06-04 19:55:34
Last updated 2024-08-04 12:32:13
Assigner mitre
State PUBLISHED

Description

Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/service_table/service_table.c.