Vulnerability · Published Apr 20, 2021 · Assigned by GitHub_M

CVE-2021-29462DNS rebinding in pupnp

High 7.6

In plain English

A high-severity improper input validation in pupnp from pupnp. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).

Severity (CVSS 3.1)7.6High

Exploit odds (30 days)0.6%top 49.8% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server part of pupnp (libupnp) appears to be vulnerable to DNS rebinding attacks because it does not check the value of the `Host` header. This can be mitigated by using DNS revolvers which block DNS-rebinding attacks. The vulnerability is fixed in version 1.14.6 and later.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	pupnp-1.8	no fix listed	DEBIAN-CVE-2021-29462
Ubuntu:22.04:LTS	pupnp-1.8	no fix listed	UBUNTU-CVE-2021-29462

Affected products (as reported)

Vendor	Product	Versions
pupnp	pupnp	< 1.14.6

Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

References

https://github.com/pupnp/pupnp/security/advisories/GHSA-6hqq-w3jq-9fhg x_refsource_CONFIRM
[oss-security] 20210420 DNS rebinding vulnerability in pupnp mailing-list, x_refsource_MLIST