CVE-2013-0229
EXPLOITEDMiniupnpd < 1.3 - Denial of Service
Title source: ruleDescription
The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a crafted request that triggers a buffer over-read.
Exploits (5)
exploitdb
WORKING POC
VERIFIED
by Rapid7 · textdosmultiple
https://www.exploit-db.com/exploits/38249
metasploit
WORKING POC
by hdm, Dejan Lukan · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/upnp/miniupnpd_dos.rb
metasploit
SCANNER
by todb, hdm · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/upnp/ssdp_msearch.rb
References (3)
Scores
EPSS
0.7435
EPSS Percentile
98.9%
Details
VulnCheck KEV
2018-07-13
Status
published
Products (4)
miniupnp_project/miniupnpd
1.0
miniupnp_project/miniupnpd
1.1
miniupnp_project/miniupnpd
1.2
miniupnp_project/miniupnpd
< 1.3
Published
Jan 31, 2013
Tracked Since
Feb 18, 2026