Unrated severityNVD Advisory· Published Apr 20, 2021· Updated Aug 3, 2024
DNS rebinding in pupnp
CVE-2021-29462
Description
The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server part of pupnp (libupnp) appears to be vulnerable to DNS rebinding attacks because it does not check the value of the Host header. This can be mitigated by using DNS revolvers which block DNS-rebinding attacks. The vulnerability is fixed in version 1.14.6 and later.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- www.openwall.com/lists/oss-security/2021/04/20/4mitremailing-listx_refsource_MLIST
- github.com/pupnp/pupnp/security/advisories/GHSA-6hqq-w3jq-9fhgmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.