CVE-2009-2174

GUPnP 0.12.7 - Denial of Service via Empty Subscription or Control Message

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-2174. PoCs published by Zeeshan Ali.

AI-analyzed exploit summary This exploit demonstrates a denial-of-service vulnerability in GUPnP versions prior to 0.12.8 by sending a malformed SOAP request with a missing payload, causing the service to crash.

Description

GUPnP 0.12.7 allows remote attackers to cause a denial of service (crash) via an empty (1) subscription or (2) control message.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Zeeshan Ali · textdoslinux
https://www.exploit-db.com/exploits/33040

This exploit demonstrates a denial-of-service vulnerability in GUPnP versions prior to 0.12.8 by sending a malformed SOAP request with a missing payload, causing the service to crash.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: GUPnP < 0.12.8
No auth needed
Prerequisites: network access to the target service
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (9)

Core 9
Core References
Exploit, Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/35390
Patch vdb-entry x_refsource_osvdb
http://www.osvdb.org/55128
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35472
Patch, Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1597
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35482

Scores

EPSS 0.1341
EPSS Percentile 94.3%

Details

Status published
Products (1)
gupnp/gupnp 0.12.7
Published Jun 23, 2009
Tracked Since Feb 18, 2026