CVE-2013-2745
An SQL Injection vulnerability exists in MiniDLNA prior to 1.1.0
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel).
Beschreibung
An SQL Injection vulnerability exists in MiniDLNA prior to 1.1.0
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | minidlna | 1.1.2+dfsg-1 |
| debian 12 | minidlna | 1.1.2+dfsg-1 |
| debian 13 | minidlna | 1.1.2+dfsg-1 |
| debian 14 | minidlna | 1.1.2+dfsg-1 |
| debian 7 | minidlna | kein Fix angegeben |
| echo | minidlna | 1.1.2+dfsg-1 |
| ubuntu 14.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04-ESM | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.10 | minidlna | 1.1.2+dfsg-1 |
Alle 13 Einträge aus 13 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | minidlna | 1.1.2+dfsg-1 |
| debian 12 | minidlna | 1.1.2+dfsg-1 |
| debian 13 | minidlna | 1.1.2+dfsg-1 |
| debian 14 | minidlna | 1.1.2+dfsg-1 |
| debian 7 | minidlna | kein Fix angegeben |
| echo | minidlna | 1.1.2+dfsg-1 |
| ubuntu 14.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04-ESM | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 17.04 | minidlna | 1.1.2+dfsg-1 |
Referenzen
- http://archives.neohapsis.com/archives/bugtraq/2013-07/0100.html
- http://media.blackhat.com/bh-us-12/Briefings/Cutlip/BH_US_12_Cutlip_SQL_Exploitation_WP.pdf
- http://www.securityfocus.com/archive/1/527299/30/0
- https://debian.pkgs.org/8/debian-main-amd64/minidlna_1.1.2+dfsg-1.1+b3_amd64.deb.html
- https://security-tracker.debian.org/tracker/CVE-2013-2745
- https://www.cve.org/CVERecord?id=CVE-2013-2745
- https://www.securityfocus.com/archive/1/527299/30/0