Read the docs
TI-2012-04969 Aliases CVE-2012-5958GHSA-mpm3-m3f6-fx5w

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in…

Priority HIGH 84CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction.

Why it matters now

EPSS 0.83216 99th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 26

CPEVersionsRoleVendor
cpe:2.3:a:libupnp_project:libupnp:*:*:*:*:*:*:*:*up to 1.6.17VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.4.0:*:*:*:*:*:*:*1.4.0VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.4.1:*:*:*:*:*:*:*1.4.1VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.4.2:*:*:*:*:*:*:*1.4.2VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.4.3:*:*:*:*:*:*:*1.4.3VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.4.4:*:*:*:*:*:*:*1.4.4VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.4.5:*:*:*:*:*:*:*1.4.5VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.4.6:*:*:*:*:*:*:*1.4.6VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.4.7:*:*:*:*:*:*:*1.4.7VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.0:*:*:*:*:*:*:*1.6.0VulnerableLibupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:*:*:*:*:*:*:*:* Versions up to 1.6.17 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.4.4:*:*:*:*:*:*:* Versions 1.4.4 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.4.6:*:*:*:*:*:*:* Versions 1.4.6 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.4.7:*:*:*:*:*:*:* Versions 1.4.7 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Libupnp Project
Show 16 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:libupnp_project:libupnp:1.6.1:*:*:*:*:*:*:*1.6.1VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.2:*:*:*:*:*:*:*1.6.2VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.3:*:*:*:*:*:*:*1.6.3VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.4:*:*:*:*:*:*:*1.6.4VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.5:*:*:*:*:*:*:*1.6.5VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.6:*:*:*:*:*:*:*1.6.6VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.7:*:*:*:*:*:*:*1.6.7VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.8:*:*:*:*:*:*:*1.6.8VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.9:*:*:*:*:*:*:*1.6.9VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.10:*:*:*:*:*:*:*1.6.10VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.11:*:*:*:*:*:*:*1.6.11VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.12:*:*:*:*:*:*:*1.6.12VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.13:*:*:*:*:*:*:*1.6.13VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.14:*:*:*:*:*:*:*1.6.14VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.15:*:*:*:*:*:*:*1.6.15VulnerableLibupnp Project
cpe:2.3:a:libupnp_project:libupnp:1.6.16:*:*:*:*:*:*:*1.6.16VulnerableLibupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.2:*:*:*:*:*:*:* Versions 1.6.2 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.3:*:*:*:*:*:*:* Versions 1.6.3 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.4:*:*:*:*:*:*:* Versions 1.6.4 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.5:*:*:*:*:*:*:* Versions 1.6.5 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.6:*:*:*:*:*:*:* Versions 1.6.6 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.7:*:*:*:*:*:*:* Versions 1.6.7 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.8:*:*:*:*:*:*:* Versions 1.6.8 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.9:*:*:*:*:*:*:* Versions 1.6.9 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.10:*:*:*:*:*:*:* Versions 1.6.10 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.11:*:*:*:*:*:*:* Versions 1.6.11 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.12:*:*:*:*:*:*:* Versions 1.6.12 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.13:*:*:*:*:*:*:* Versions 1.6.13 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.14:*:*:*:*:*:*:* Versions 1.6.14 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.15:*:*:*:*:*:*:* Versions 1.6.15 Vulnerable ·Libupnp Project
  • cpe:2.3:a:libupnp_project:libupnp:1.6.16:*:*:*:*:*:*:* Versions 1.6.16 Vulnerable ·Libupnp Project

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-5958
  2. 2026-10-03 Alias added: GHSA-mpm3-m3f6-fx5w

References

Patch 1

Advisory 5

Other 11

  • TI-2012-04972 Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in… CVSS 2.0HIGH 10.0
  • TI-2016-05358 Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to… CVSS 3.0HIGH 7.5
  • TI-2016-07276 Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in… CVSS 3.0CRITICAL 9.8
  • TI-2020-10834 Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a… CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences