CVE-2017-8798

Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified other impact.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

24.03% chance of exploitation in the next 30 days, 98th percentile

Published

2017-05-11

Updated

2024-08-05

Proof-of-concept exploits (2)

• tintinweb/pub/tree/master/pocs/cve-2017-8798
• guhe120/upnp4★ · 2018-04-13

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/43501

References

• CVE Record
• NVD entry

Related

• CVE-2017-18016
• CVE-2018-10057
• CVE-2018-10058
• CVE-2020-15690
• CVE-2013-1491
• CVE-2013-5842