published January 31, 2013
NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.
The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a crafted request that triggers a buffer over-read.