GCVE-110-MAGEIA-2020-304 — Vulnetix

GCVE-110-MAGEIA-2020-304

Advisory Published

Vulnetix · Advisory published July 31, 2020

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue. (CVE-2020-12695).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	gssdp	0 (affected), 1.2.3-1.mga7 (unaffected)	—
Mageia	gupnp	0 (affected), 1.2.3-1.mga7 (unaffected)	—

Aliases

References

Updated gssdp/gupnp packages fix security vulnerability

advisory

Updated gssdp/gupnp packages fix security vulnerability

issue

Updated gssdp/gupnp packages fix security vulnerability

issue

Browse GCVE Records

74,147 records in the GCVE database · Updated July 21, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON

$ Console Community · 100/wk Open console ›