{"id":"USN-2780-1","summary":"miniupnpc vulnerability","details":"Aleksandar Nikolic discovered a buffer overflow vulnerability in the\nXML parser functionality of the MiniUPnP library. A remote attacker\ncould use this to cause a denial of service (application crash) or\npossibly execute arbitrary code with privileges of the user running\nan application that uses the MiniUPnP library.\n","modified":"2026-04-22T09:18:20.691726Z","published":"2015-10-20T21:49:14Z","related":["UBUNTU-CVE-2015-6031"],"upstream":["CVE-2015-6031","UBUNTU-CVE-2015-6031"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-2780-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2015-6031"}],"affected":[{"package":{"name":"miniupnpc","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/miniupnpc@1.6-3ubuntu2.14.04.2?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-3ubuntu2.14.04.2"}]}],"versions":["1.6-3ubuntu2","1.6-3ubuntu2.14.04.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libminiupnpc8","binary_version":"1.6-3ubuntu2.14.04.2"},{"binary_name":"miniupnpc","binary_version":"1.6-3ubuntu2.14.04.2"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2015-6031","severity":[{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:14.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2780-1.json"}}],"schema_version":"1.7.5"}