Vulnetix
Try Vulnetix Request Demo
CVE-2020-28926 PUBLISHED

ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove.

EPSS 66.11% · 98.5th percentile

Risk Scores

EPSS Score
66.11%
98.5th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSminidlna1.1.4+dfsg-4build1, 1.1.5+dfsg-1, 1.1.5+dfsg-2
Ubuntu:20.04:LTSminidlna1.2.1+dfsg-1build1, 0
Ubuntu:18.04:LTSminidlna1.2.1+dfsg-1, 0, 1.2.0+dfsg-2

Timeline

References

Open in Interactive Console →