CVE-2020-12695

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2020-12695
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-12695.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-12695
Related
Published
2020-06-08T17:15:09Z
Modified
2024-12-05T15:23:17.243466Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H CVSS Calculator
Summary
[none]
Details

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.

References

Affected packages

Alpine:v3.10 / hostapd

Package

Name
hostapd
Purl
pkg:apk/alpine/hostapd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.8-r3

Affected versions

0.*

0.6.9-r0
0.6.9-r1
0.6.10-r0
0.6.10-r1
0.6.10-r2
0.7.3-r0
0.7.3-r1
0.7.3-r2

1.*

1.0-r0
1.0-r1
1.0-r2
1.1-r0

2.*

2.0-r0
2.0-r1
2.1-r0
2.2-r0
2.3-r0
2.4-r0
2.4-r1
2.5-r0
2.5-r1
2.5-r2
2.5-r3
2.6-r0
2.6-r1
2.6-r2
2.6-r3
2.6-r4
2.6-r5
2.7-r0
2.8-r0
2.8-r1
2.8-r2

Alpine:v3.11 / hostapd

Package

Name
hostapd
Purl
pkg:apk/alpine/hostapd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.9-r2

Affected versions

0.*

0.6.9-r0
0.6.9-r1
0.6.10-r0
0.6.10-r1
0.6.10-r2
0.7.3-r0
0.7.3-r1
0.7.3-r2

1.*

1.0-r0
1.0-r1
1.0-r2
1.1-r0

2.*

2.0-r0
2.0-r1
2.1-r0
2.2-r0
2.3-r0
2.4-r0
2.4-r1
2.5-r0
2.5-r1
2.5-r2
2.5-r3
2.6-r0
2.6-r1
2.6-r2
2.6-r3
2.6-r4
2.6-r5
2.7-r0
2.8-r0
2.9-r0
2.9-r1

Alpine:v3.12 / hostapd

Package

Name
hostapd
Purl
pkg:apk/alpine/hostapd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.9-r2

Affected versions

0.*

0.6.9-r0
0.6.9-r1
0.6.10-r0
0.6.10-r1
0.6.10-r2
0.7.3-r0
0.7.3-r1
0.7.3-r2

1.*

1.0-r0
1.0-r1
1.0-r2
1.1-r0

2.*

2.0-r0
2.0-r1
2.1-r0
2.2-r0
2.3-r0
2.4-r0
2.4-r1
2.5-r0
2.5-r1
2.5-r2
2.5-r3
2.6-r0
2.6-r1
2.6-r2
2.6-r3
2.6-r4
2.6-r5
2.7-r0
2.8-r0
2.9-r0
2.9-r1

Alpine:v3.13 / hostapd

Package

Name
hostapd
Purl
pkg:apk/alpine/hostapd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.9-r2

Affected versions

0.*

0.6.9-r0
0.6.9-r1
0.6.10-r0
0.6.10-r1
0.6.10-r2
0.7.3-r0
0.7.3-r1
0.7.3-r2

1.*

1.0-r0
1.0-r1
1.0-r2
1.1-r0

2.*

2.0-r0
2.0-r1
2.1-r0
2.2-r0
2.3-r0
2.4-r0
2.4-r1
2.5-r0
2.5-r1
2.5-r2
2.5-r3
2.6-r0
2.6-r1
2.6-r2
2.6-r3
2.6-r4
2.6-r5
2.7-r0
2.8-r0
2.9-r0
2.9-r1

Alpine:v3.14 / hostapd

Package

Name
hostapd
Purl
pkg:apk/alpine/hostapd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.9-r2

Affected versions

0.*

0.6.9-r0
0.6.9-r1
0.6.10-r0
0.6.10-r1
0.6.10-r2
0.7.3-r0
0.7.3-r1
0.7.3-r2

1.*

1.0-r0
1.0-r1
1.0-r2
1.1-r0

2.*

2.0-r0
2.0-r1
2.1-r0
2.2-r0
2.3-r0
2.4-r0
2.4-r1
2.5-r0
2.5-r1
2.5-r2
2.5-r3
2.6-r0
2.6-r1
2.6-r2
2.6-r3
2.6-r4
2.6-r5
2.7-r0
2.8-r0
2.9-r0
2.9-r1

Alpine:v3.15 / hostapd

Package

Name
hostapd
Purl
pkg:apk/alpine/hostapd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.9-r2

Affected versions

0.*

0.6.9-r0
0.6.9-r1
0.6.10-r0
0.6.10-r1
0.6.10-r2
0.7.3-r0
0.7.3-r1
0.7.3-r2

1.*

1.0-r0
1.0-r1
1.0-r2
1.1-r0

2.*

2.0-r0
2.0-r1
2.1-r0
2.2-r0
2.3-r0
2.4-r0
2.4-r1
2.5-r0
2.5-r1
2.5-r2
2.5-r3
2.6-r0
2.6-r1
2.6-r2
2.6-r3
2.6-r4
2.6-r5
2.7-r0
2.8-r0
2.9-r0
2.9-r1

Alpine:v3.16 / hostapd

Package

Name
hostapd
Purl
pkg:apk/alpine/hostapd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.9-r2

Affected versions

0.*

0.6.9-r0
0.6.9-r1
0.6.10-r0
0.6.10-r1
0.6.10-r2
0.7.3-r0
0.7.3-r1
0.7.3-r2

1.*

1.0-r0
1.0-r1
1.0-r2
1.1-r0

2.*

2.0-r0
2.0-r1
2.1-r0
2.2-r0
2.3-r0
2.4-r0
2.4-r1
2.5-r0
2.5-r1
2.5-r2
2.5-r3
2.6-r0
2.6-r1
2.6-r2
2.6-r3
2.6-r4
2.6-r5
2.7-r0
2.8-r0
2.9-r0
2.9-r1

Alpine:v3.17 / hostapd

Package

Name
hostapd
Purl
pkg:apk/alpine/hostapd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.9-r2

Affected versions

0.*

0.6.9-r0
0.6.9-r1
0.6.10-r0
0.6.10-r1
0.6.10-r2
0.7.3-r0
0.7.3-r1
0.7.3-r2

1.*

1.0-r0
1.0-r1
1.0-r2
1.1-r0

2.*

2.0-r0
2.0-r1
2.1-r0
2.2-r0
2.3-r0
2.4-r0
2.4-r1
2.5-r0
2.5-r1
2.5-r2
2.5-r3
2.6-r0
2.6-r1
2.6-r2
2.6-r3
2.6-r4
2.6-r5
2.7-r0
2.8-r0
2.9-r0
2.9-r1

Alpine:v3.18 / hostapd

Package

Name
hostapd
Purl
pkg:apk/alpine/hostapd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.9-r2

Affected versions

0.*

0.6.9-r0
0.6.9-r1
0.6.10-r0
0.6.10-r1
0.6.10-r2
0.7.3-r0
0.7.3-r1
0.7.3-r2

1.*

1.0-r0
1.0-r1
1.0-r2
1.1-r0

2.*

2.0-r0
2.0-r1
2.1-r0
2.2-r0
2.3-r0
2.4-r0
2.4-r1
2.5-r0
2.5-r1
2.5-r2
2.5-r3
2.6-r0
2.6-r1
2.6-r2
2.6-r3
2.6-r4
2.6-r5
2.7-r0
2.8-r0
2.9-r0
2.9-r1

Alpine:v3.19 / hostapd

Package

Name
hostapd
Purl
pkg:apk/alpine/hostapd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.9-r2

Affected versions

0.*

0.6.9-r0
0.6.9-r1
0.6.10-r0
0.6.10-r1
0.6.10-r2
0.7.3-r0
0.7.3-r1
0.7.3-r2

1.*

1.0-r0
1.0-r1
1.0-r2
1.1-r0

2.*

2.0-r0
2.0-r1
2.1-r0
2.2-r0
2.3-r0
2.4-r0
2.4-r1
2.5-r0
2.5-r1
2.5-r2
2.5-r3
2.6-r0
2.6-r1
2.6-r2
2.6-r3
2.6-r4
2.6-r5
2.7-r0
2.8-r0
2.9-r0
2.9-r1

Alpine:v3.20 / hostapd

Package

Name
hostapd
Purl
pkg:apk/alpine/hostapd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.9-r2

Affected versions

0.*

0.6.9-r0
0.6.9-r1
0.6.10-r0
0.6.10-r1
0.6.10-r2
0.7.3-r0
0.7.3-r1
0.7.3-r2

1.*

1.0-r0
1.0-r1
1.0-r2
1.1-r0

2.*

2.0-r0
2.0-r1
2.1-r0
2.2-r0
2.3-r0
2.4-r0
2.4-r1
2.5-r0
2.5-r1
2.5-r2
2.5-r3
2.6-r0
2.6-r1
2.6-r2
2.6-r3
2.6-r4
2.6-r5
2.7-r0
2.8-r0
2.9-r0
2.9-r1

Alpine:v3.21 / hostapd

Package

Name
hostapd
Purl
pkg:apk/alpine/hostapd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.9-r2

Affected versions

0.*

0.6.9-r0
0.6.9-r1
0.6.10-r0
0.6.10-r1
0.6.10-r2
0.7.3-r0
0.7.3-r1
0.7.3-r2

1.*

1.0-r0
1.0-r1
1.0-r2
1.1-r0

2.*

2.0-r0
2.0-r1
2.1-r0
2.2-r0
2.3-r0
2.4-r0
2.4-r1
2.5-r0
2.5-r1
2.5-r2
2.5-r3
2.6-r0
2.6-r1
2.6-r2
2.6-r3
2.6-r4
2.6-r5
2.7-r0
2.8-r0
2.9-r0
2.9-r1

Alpine:v3.9 / hostapd

Package

Name
hostapd
Purl
pkg:apk/alpine/hostapd?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7-r6

Affected versions

0.*

0.6.9-r0
0.6.9-r1
0.6.10-r0
0.6.10-r1
0.6.10-r2
0.7.3-r0
0.7.3-r1
0.7.3-r2

1.*

1.0-r0
1.0-r1
1.0-r2
1.1-r0

2.*

2.0-r0
2.0-r1
2.1-r0
2.2-r0
2.3-r0
2.4-r0
2.4-r1
2.5-r0
2.5-r1
2.5-r2
2.5-r3
2.6-r0
2.6-r1
2.6-r2
2.6-r3
2.6-r4
2.6-r5
2.7-r0
2.7-r1
2.7-r2
2.7-r3
2.7-r4
2.7-r5

Debian:11 / gupnp

Package

Name
gupnp
Purl
pkg:deb/debian/gupnp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.3-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / gupnp

Package

Name
gupnp
Purl
pkg:deb/debian/gupnp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.3-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / gupnp

Package

Name
gupnp
Purl
pkg:deb/debian/gupnp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.3-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:11 / minidlna

Package

Name
minidlna
Purl
pkg:deb/debian/minidlna?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.1+dfsg-3

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / minidlna

Package

Name
minidlna
Purl
pkg:deb/debian/minidlna?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.1+dfsg-3

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / minidlna

Package

Name
minidlna
Purl
pkg:deb/debian/minidlna?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.2.1+dfsg-3

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:11 / pupnp-1.8

Package

Name
pupnp-1.8
Purl
pkg:deb/debian/pupnp-1.8?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:1.*

1:1.8.4-2

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / pupnp-1.8

Package

Name
pupnp-1.8
Purl
pkg:deb/debian/pupnp-1.8?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:1.*

1:1.8.4-2

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:11 / wpa

Package

Name
wpa
Purl
pkg:deb/debian/wpa?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:2.9.0-16

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / wpa

Package

Name
wpa
Purl
pkg:deb/debian/wpa?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:2.9.0-16

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / wpa

Package

Name
wpa
Purl
pkg:deb/debian/wpa?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2:2.9.0-16

Ecosystem specific 

{
    "urgency": "not yet assigned"
}