CVE-2013-0229

EXPLOITED

Miniupnpd < 1.3 - Denial of Service

Title source: rule

Description

The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a crafted request that triggers a buffer over-read.

Exploits (5)

exploitdb WORKING POC VERIFIED
by Rapid7 · textdosmultiple
https://www.exploit-db.com/exploits/38249
nomisec SCANNER 1 stars
by lochiiconnectivity · poc
https://github.com/lochiiconnectivity/vulnupnp
exploitdb WORKING POC
perldoshardware
https://www.exploit-db.com/exploits/37517
metasploit WORKING POC
by hdm, Dejan Lukan · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/upnp/miniupnpd_dos.rb
metasploit SCANNER
by todb, hdm · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/upnp/ssdp_msearch.rb

Scores

EPSS 0.7435
EPSS Percentile 98.9%

Details

VulnCheck KEV 2018-07-13
Status published
Products (4)
miniupnp_project/miniupnpd 1.0
miniupnp_project/miniupnpd 1.1
miniupnp_project/miniupnpd 1.2
miniupnp_project/miniupnpd < 1.3
Published Jan 31, 2013
Tracked Since Feb 18, 2026