Description (CNA)
miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffer overflow and significant data leak, a different vulnerability than CVE-2019-12107. In Bitcoin Core before 0.12, remote code execution was possible in conjunction with CVE-2015-6031 exploitation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
- https://bitcoincore.org/en/2024/07/03/disclose_upnp_rce/
- https://github.com/miniupnp/miniupnp/pull/157
- https://github.com/miniupnp/miniupnp/commit/4c90b87ce3d2517097880279e8c3daa7731100e6
ADP enrichment
No English description supplied.
No references supplied.