miniupnpd Integer Underflow SOAPAction Header Parsing

miniupnpd contains an integer underflow vulnerability in SOAPAction header parsing that allows remote attackers to cause a denial of service or information disclosure by sending a malformed SOAPAction header with a single quote. Attackers can trigger an out-of-bounds memory read by exploiting improper length validation in ParseHttpHeaders(), where the parsed length underflows to a large unsigned value when passed to memchr(), causing the process to scan memory far beyond the allocated HTTP request buffer.

N/A

整数下溢(超界折返)

MiniUPnP 安全漏洞

MiniUPnP是Miniupnp项目的一套可以用于嵌入式系统的UPnP工具。该工具可实现家庭网络和公司网络中的设备相互连接。 MiniUPnP存在安全漏洞，该漏洞源于SOAPAction标头解析存在整数下溢，可能导致远程攻击者通过发送畸形SOAPAction标头触发越界内存读取，造成拒绝服务或信息泄露。

N/A

N/A