Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 727170 (CVE-2020-13848) - <net-libs/libupnp-1.14.0: Denial of service via crafted SSDP message (CVE-2020-13848)
Summary: <net-libs/libupnp-1.14.0: Denial of service via crafted SSDP message (CVE-202...
Status: IN_PROGRESS
Alias: CVE-2020-13848
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
URL: https://github.com/pupnp/pupnp/issues...
Whiteboard: B3 [glsa? cve]
Keywords: PullRequest
Depends on: 739320 761882 761885
Blocks:
  Show dependency tree
 
Reported: 2020-06-04 21:17 UTC by Sam James
Modified: 2021-10-03 13:17 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-06-04 21:17:09 UTC 
Description:
"Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/service_table/service_table.c."
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-06-04 21:17:44 UTC 
@maintainer(s), please apply the provided patch:

https://github.com/pupnp/pupnp/commit/c805c1de1141cb22f74c0d94dd5664bda37398e0
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-06-27 20:54:59 UTC 
ping
Comment 3 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-08-20 11:00:41 UTC 
Ping. Please let us know if you're unable to patch this right now.
Comment 4 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-08-25 23:46:14 UTC 
I guess we will stable..
Comment 5 Rolf Eike Beer archtester 2020-09-07 18:02:17 UTC 
hppa/sparc stable
Comment 6 Thomas Deutschmann (RETIRED) gentoo-dev 2020-09-07 19:54:31 UTC 
x86 stable
Comment 7 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-09-07 21:19:38 UTC 
arm done
Comment 8 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-09-07 21:20:59 UTC 
arm64 done
Comment 9 ernsteiswuerfel archtester 2020-09-09 17:29:56 UTC 
Looking good on ppc64.

 # cat /mnt/mychroot/root/tatt/libupnp-727170.report 
USE tests started on Di 8. Sep 15:12:12 CEST 2020

FEATURES=' test' USE='' succeeded for =net-libs/libupnp-1.14.0
USE='-blocking-tcp doc ipv6 -reuseaddr -samples -static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='blocking-tcp -doc -ipv6 reuseaddr -samples -static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='blocking-tcp doc ipv6 reuseaddr -samples -static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='-blocking-tcp -doc -ipv6 -reuseaddr samples -static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='-blocking-tcp -doc ipv6 reuseaddr samples -static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='-blocking-tcp -doc ipv6 -reuseaddr -samples static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='blocking-tcp -doc ipv6 -reuseaddr -samples static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='-blocking-tcp -doc ipv6 reuseaddr -samples static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='blocking-tcp doc ipv6 reuseaddr -samples static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='-blocking-tcp -doc -ipv6 -reuseaddr samples static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='blocking-tcp doc -ipv6 -reuseaddr samples static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='-blocking-tcp doc ipv6 reuseaddr samples static-libs' succeeded for =net-libs/libupnp-1.14.0

revdep tests started on Di 8. Sep 15:29:41 CEST 2020

FEATURES=' test' USE='upnp' succeeded for media-video/vlc
FEATURES=' test' USE='upnp' succeeded for net-p2p/amule
Comment 10 ernsteiswuerfel archtester 2020-09-09 17:30:16 UTC 
Looking good on ppc.

 # cat libupnp-727170.report 
USE tests started on Mi 9. Sep 17:34:39 CEST 2020

FEATURES=' test' USE='' succeeded for =net-libs/libupnp-1.14.0
USE='-blocking-tcp -doc -ipv6 -reuseaddr -samples -static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='blocking-tcp -doc ipv6 -reuseaddr samples -static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='blocking-tcp doc ipv6 -reuseaddr samples -static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='blocking-tcp -doc ipv6 reuseaddr samples -static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='blocking-tcp doc ipv6 reuseaddr samples -static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='blocking-tcp doc -ipv6 -reuseaddr -samples static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='blocking-tcp doc ipv6 -reuseaddr -samples static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='blocking-tcp doc -ipv6 reuseaddr -samples static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='blocking-tcp doc ipv6 -reuseaddr samples static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='-blocking-tcp -doc ipv6 reuseaddr samples static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='blocking-tcp -doc ipv6 reuseaddr samples static-libs' succeeded for =net-libs/libupnp-1.14.0
USE='blocking-tcp doc ipv6 reuseaddr samples static-libs' succeeded for =net-libs/libupnp-1.14.0

revdep tests started on Mi 9. Sep 18:52:20 CEST 2020

FEATURES=' test' USE='upnp' succeeded for media-video/vlc
FEATURES=' test' USE='upnp' succeeded for net-p2p/amule
Comment 11 Sergei Trofimovich (RETIRED) gentoo-dev 2020-09-12 08:07:01 UTC 
ppc/ppc64 stable thanks to ernsteiswuerfel!
Comment 12 Agostino Sarubbo gentoo-dev 2020-09-20 20:22:07 UTC 
amd64 stable.

Maintainer(s), please cleanup.
Security, please vote.
Comment 13 Larry the Git Cow gentoo-dev 2021-03-12 16:27:24 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=33ed7ab218de232aae5e597c3fd24b37e190dd21

commit 33ed7ab218de232aae5e597c3fd24b37e190dd21
Author:     John Helmert III <ajak@gentoo.org>
AuthorDate: 2021-03-12 16:26:07 +0000
Commit:     John Helmert III <ajak@gentoo.org>
CommitDate: 2021-03-12 16:26:52 +0000

    net-libs/libupnp: security cleanup (drop <1.14.0)
    
    Bug: https://bugs.gentoo.org/727170
    Package-Manager: Portage-3.0.12, Repoman-3.0.2
    Signed-off-by: John Helmert III <ajak@gentoo.org>

 net-libs/libupnp/Manifest              |  4 ---
 net-libs/libupnp/libupnp-1.12.1.ebuild | 47 ----------------------------------
 net-libs/libupnp/libupnp-1.6.21.ebuild | 47 ----------------------------------
 net-libs/libupnp/libupnp-1.6.25.ebuild | 47 ----------------------------------
 net-libs/libupnp/libupnp-1.8.7.ebuild  | 47 ----------------------------------
 5 files changed, 192 deletions(-)
Comment 14 Conrad Kostecki gentoo-dev 2021-10-03 13:17:05 UTC 
FYI: I took ownership and bumped to newest 1.14.12