CVE-2013-2745
An SQL Injection vulnerability exists in MiniDLNA prior to 1.1.0
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Ubuntu (orta).
Açıklama
An SQL Injection vulnerability exists in MiniDLNA prior to 1.1.0
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | minidlna | 1.1.2+dfsg-1 |
| debian 12 | minidlna | 1.1.2+dfsg-1 |
| debian 13 | minidlna | 1.1.2+dfsg-1 |
| debian 14 | minidlna | 1.1.2+dfsg-1 |
| debian 7 | minidlna | düzeltme belirtilmemiş |
| echo | minidlna | 1.1.2+dfsg-1 |
| ubuntu 14.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04-ESM | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.10 | minidlna | 1.1.2+dfsg-1 |
13 kaynaktaki 13 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | minidlna | 1.1.2+dfsg-1 |
| debian 12 | minidlna | 1.1.2+dfsg-1 |
| debian 13 | minidlna | 1.1.2+dfsg-1 |
| debian 14 | minidlna | 1.1.2+dfsg-1 |
| debian 7 | minidlna | düzeltme belirtilmemiş |
| echo | minidlna | 1.1.2+dfsg-1 |
| ubuntu 14.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04-ESM | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 17.04 | minidlna | 1.1.2+dfsg-1 |
Referanslar
- http://archives.neohapsis.com/archives/bugtraq/2013-07/0100.html
- http://media.blackhat.com/bh-us-12/Briefings/Cutlip/BH_US_12_Cutlip_SQL_Exploitation_WP.pdf
- http://www.securityfocus.com/archive/1/527299/30/0
- https://debian.pkgs.org/8/debian-main-amd64/minidlna_1.1.2+dfsg-1.1+b3_amd64.deb.html
- https://security-tracker.debian.org/tracker/CVE-2013-2745
- https://www.cve.org/CVERecord?id=CVE-2013-2745
- https://www.securityfocus.com/archive/1/527299/30/0