Readymedia Readymediaproject Readymedia

Do you want an email whenever new security vulnerabilities are reported in Readymediaproject Readymedia?

By the Year

In 2024 there have been 0 vulnerabilities in Readymediaproject Readymedia . Last year Readymedia had 1 security vulnerability published. Right now, Readymedia is on track to have less security vulnerabilities in 2024 than it did last year.

Year Vulnerabilities Average Score
2024 0 0.00
2023 1 9.80
2022 1 7.40
2021 0 0.00
2020 1 9.80
2019 0 0.00
2018 0 0.00

It may take a day or so for new Readymedia vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Readymediaproject Readymedia Security Vulnerabilities

ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow

CVE-2023-33476 9.8 - Critical - June 02, 2023

ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values that exceed the length of the allocated buffer, resulting in out-of-bounds read/write.

Memory Corruption

A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1

CVE-2022-26505 7.4 - High - March 06, 2022

A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files.

Authentication Bypass by Spoofing

ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution

CVE-2020-28926 9.8 - Critical - November 30, 2020

ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove.

Classic Buffer Overflow

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Debian Linux or by Readymediaproject? Click the Watch button to subscribe.

subscribe