Description

An issue in the UPnP protocol in 4thline cling 2.0.0 through 2.1.2 allows remote attackers to cause a denial of service via an unchecked CALLBACK parameter in the request header

Remediation

References

https://zh-cn.tenable.com/blog/cve-2020-12695-callstranger-vulnerability-in-universal-plug-and-play-upnp-puts-billions-of?tns_redirect=true

https://github.com/4thline/cling/issues/253

Related Vulnerabilities

CVE-2017-16019 Vulnerability in npm package gitbook

CVE-2021-32854 Vulnerability in maven package org.webjars.npm:textangular

CVE-2021-29505 Vulnerability in maven package com.thoughtworks.xstream:xstream

CVE-2020-17527 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core

CVE-2022-35204 Vulnerability in npm package vite

Severity

High

Classification

CWE-918 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Not Applicable Exploit Issue Tracking Patch Third Party Advisory