CVE catalog

CVE-2020-12695

pupnp-1.8: CVE-2020-12695

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
15.19% · Oct 25, 2026

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianwpasid2:2.11-4fixed
Debianwpaforky2:2.11-4fixed
Debianwpatrixie2:2.10-24fixed
Debianwpabookworm2:2.10-12+deb12u3fixed
Debianwpabookworm-security2:2.10-12+deb12u2fixed
Debiangupnpsid1.6.10-1fixed
Debiangupnpforky1.6.10-1fixed
Debiangupnptrixie1.6.8-2fixed
Debiangupnpbookworm1.6.3-1fixed
Debianminidlnasid1.3.3+dfsg-1.1fixed
Debianminidlnaforky1.3.3+dfsg-1.1fixed
Debianminidlnatrixie1.3.3+dfsg-1.1fixed
Debianminidlnabookworm1.3.0+dfsg-2.2+deb12u1fixed
Debianminidlnabookworm-security1.3.0+dfsg-2.2+deb12u1fixed
Debianpupnp-1.8bookworm1:1.8.4-2vulnerable
Alpinehostapd3.102.8-r3fixed
Alpinehostapd3.112.9-r2fixed
Alpinehostapd3.122.9-r2fixed
Alpinehostapd3.132.9-r2fixed
Alpinehostapd3.142.9-r2fixed
Alpinehostapd3.152.9-r2fixed
Alpinehostapd3.162.9-r2fixed
Alpinehostapd3.172.9-r2fixed
Alpinehostapd3.182.9-r2fixed
Alpinehostapd3.192.9-r2fixed
Alpinehostapd3.202.9-r2fixed
Alpinehostapd3.212.9-r2fixed
Alpinehostapd3.222.9-r2fixed
Alpinehostapd3.232.9-r2fixed
Alpinehostapd3.242.9-r2fixed
Alpinehostapd3.92.7-r6fixed
Ubuntugupnp20.041.2.1-1vulnerable
Ubuntugupnp20.041.2.1-2vulnerable
Ubuntugupnp20.041.2.2-1vulnerable
Ubuntugupnp20.041.2.3-0ubuntu0.20.04.1fixed
Ubuntuwpapro1.0-3ubuntu2vulnerable
Ubuntuwpapro1.0-3ubuntu3vulnerable
Ubuntuwpapro1.0-3ubuntu4vulnerable
Ubuntuwpapro2.1-0ubuntu1vulnerable
Ubuntuwpapro2.1-0ubuntu1.1vulnerable
Ubuntuwpapro2.1-0ubuntu1.2vulnerable
Ubuntuwpapro2.1-0ubuntu1.3vulnerable
Ubuntuwpapro2.1-0ubuntu1.4vulnerable
Ubuntuwpapro2.1-0ubuntu1.5vulnerable
Ubuntuwpapro2.1-0ubuntu1.6vulnerable
Ubuntuwpapro2.1-0ubuntu1.7vulnerable
Ubuntuwpapro2.1-0ubuntu1.7+esm1vulnerable
Ubuntuwpapro2.1-0ubuntu1.7+esm2vulnerable
Ubuntuwpapro2.1-0ubuntu1.7+esm3fixed
Ubuntuwpa16.042.4-0ubuntu3vulnerable
Ubuntuwpa16.042.4-0ubuntu4vulnerable
Ubuntuwpa16.042.4-0ubuntu5vulnerable
Ubuntuwpa16.042.4-0ubuntu6vulnerable
Ubuntuwpa16.042.4-0ubuntu6.2vulnerable
Ubuntuwpa16.042.4-0ubuntu6.3vulnerable
Ubuntuwpa16.042.4-0ubuntu6.4vulnerable
Ubuntuwpa16.042.4-0ubuntu6.5vulnerable
Ubuntuwpa16.042.4-0ubuntu6.6vulnerable
Ubuntuwpa16.042.4-0ubuntu6.7fixed
Ubuntuwpa18.042.4-0ubuntu10vulnerable
Ubuntuwpa18.042:2.4-1.1ubuntu1vulnerable
Ubuntuwpa18.042:2.6-15ubuntu1vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.1vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.2vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.3vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.4vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.5vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.6vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.7fixed
Ubuntuwpa20.042:2.9-1ubuntu2vulnerable
Ubuntuwpa20.042:2.9-1ubuntu3vulnerable
Ubuntuwpa20.042:2.9-1ubuntu4vulnerable
Ubuntuwpa20.042:2.9-1ubuntu4.1vulnerable
Ubuntuwpa20.042:2.9-1ubuntu4.2fixed
Ubuntuminidlna16.041.1.4+dfsg-4build1vulnerable
Ubuntuminidlna16.041.1.5+dfsg-1vulnerable
Ubuntuminidlna16.041.1.5+dfsg-2vulnerable
Ubuntuminidlna16.041.1.5+dfsg-2ubuntu0.1fixed
Ubuntuminidlna18.041.2.0+dfsg-2vulnerable
Ubuntuminidlna18.041.2.1+dfsg-1vulnerable
Ubuntuminidlna18.041.2.1+dfsg-1ubuntu0.18.04.1fixed
Ubuntuminidlna20.041.2.1+dfsg-1build1vulnerable
Ubuntuminidlna20.041.2.1+dfsg-1ubuntu0.20.04.1fixed
Ubuntuwpapro1.0-3ubuntu2vulnerable
Ubuntuwpapro1.0-3ubuntu3vulnerable
Ubuntuwpapro1.0-3ubuntu4vulnerable
Ubuntuwpapro2.1-0ubuntu1vulnerable
Ubuntuwpapro2.1-0ubuntu1.1vulnerable
Ubuntuwpapro2.1-0ubuntu1.2vulnerable
Ubuntuwpapro2.1-0ubuntu1.3vulnerable
Ubuntuwpapro2.1-0ubuntu1.4vulnerable
Ubuntuwpapro2.1-0ubuntu1.5vulnerable
Ubuntuwpapro2.1-0ubuntu1.6vulnerable
Ubuntuwpapro2.1-0ubuntu1.7vulnerable
Ubuntuwpapro2.1-0ubuntu1.7+esm1vulnerable
Ubuntuwpapro2.1-0ubuntu1.7+esm2vulnerable
Ubuntuwpapro2.1-0ubuntu1.7+esm3fixed
Ubuntuminidlna16.041.1.4+dfsg-4build1vulnerable
Ubuntuminidlna16.041.1.5+dfsg-1vulnerable
Ubuntuminidlna16.041.1.5+dfsg-2vulnerable
Ubuntuminidlna16.041.1.5+dfsg-2ubuntu0.1fixed
Ubuntuwpa16.042.4-0ubuntu3vulnerable
Ubuntuwpa16.042.4-0ubuntu4vulnerable
Ubuntuwpa16.042.4-0ubuntu5vulnerable
Ubuntuwpa16.042.4-0ubuntu6vulnerable
Ubuntuwpa16.042.4-0ubuntu6.2vulnerable
Ubuntuwpa16.042.4-0ubuntu6.3vulnerable
Ubuntuwpa16.042.4-0ubuntu6.4vulnerable
Ubuntuwpa16.042.4-0ubuntu6.5vulnerable
Ubuntuwpa16.042.4-0ubuntu6.6vulnerable
Ubuntuwpa16.042.4-0ubuntu6.7fixed
Ubuntugupnp16.040.20.14-1vulnerable
Ubuntugupnp16.040.20.15-1vulnerable
Ubuntugupnp16.040.20.15-1ubuntu1vulnerable
Ubuntugupnp16.040.20.16-1vulnerable
Ubuntulibupnppro1:1.6.19+git20141001-1vulnerable
Ubuntulibupnppro1:1.6.19+git20141001-1ubuntu1vulnerable
Ubuntulibupnppro1:1.6.19+git20160116-1vulnerable
Ubuntulibupnppro1:1.6.19+git20160116-1ubuntu0.1~esm1vulnerable
Ubuntuminidlna18.041.2.0+dfsg-2vulnerable
Ubuntuminidlna18.041.2.1+dfsg-1vulnerable
Ubuntuminidlna18.041.2.1+dfsg-1ubuntu0.18.04.1fixed
Ubuntuwpa18.042.4-0ubuntu10vulnerable
Ubuntuwpa18.042:2.4-1.1ubuntu1vulnerable
Ubuntuwpa18.042:2.6-15ubuntu1vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.1vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.2vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.3vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.4vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.5vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.6vulnerable
Ubuntuwpa18.042:2.6-15ubuntu2.7fixed
Ubuntugupnp18.041.0.1-1vulnerable
Ubuntugupnp18.041.0.2-1vulnerable
Ubuntugupnp18.041.0.2-2vulnerable
Ubuntulibupnp18.041:1.6.22-1vulnerable
Ubuntulibupnp18.041:1.6.24-1vulnerable
Ubuntulibupnp18.041:1.6.24-2vulnerable
Ubuntulibupnp18.041:1.6.24-3vulnerable
Ubuntulibupnp18.041:1.6.24-4vulnerable
Ubuntupupnp-1.818.041:1.8.2-2vulnerable
Ubuntupupnp-1.818.041:1.8.2-3vulnerable
Ubuntugupnp20.041.2.1-1vulnerable
Ubuntugupnp20.041.2.1-2vulnerable
Ubuntugupnp20.041.2.2-1vulnerable
Ubuntugupnp20.041.2.3-0ubuntu0.20.04.1fixed
Ubuntuminidlna20.041.2.1+dfsg-1build1vulnerable
Ubuntuminidlna20.041.2.1+dfsg-1ubuntu0.20.04.1fixed
Ubuntuwpa20.042:2.9-1ubuntu2vulnerable
Ubuntuwpa20.042:2.9-1ubuntu3vulnerable
Ubuntuwpa20.042:2.9-1ubuntu4vulnerable
Ubuntuwpa20.042:2.9-1ubuntu4.1vulnerable
Ubuntuwpa20.042:2.9-1ubuntu4.2fixed
Ubuntupupnp-1.820.041:1.8.4-2ubuntu2vulnerable
Ubuntupupnp-1.822.041:1.8.4-2ubuntu2vulnerable
Opensuseminidlnatumbleweed1.3.0-2.7fixed
Opensuseminidlnaleap 15.21.3.0-lp152.4.3.1fixed
Opensusegupnptumbleweed1.2.7-2.2fixed
Suseminidlnapackage hub 15 sp11.3.0-bp151.2.3.1fixed
Opensuseminidlnaleap 15.11.3.0-lp151.3.3.1fixed
Suseminidlnapackage hub 15 sp21.3.0-bp152.4.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianwpasourcesid2:2.9.0-16not yet assignedNot reported[976106]
Debianwpasourceforky2:2.9.0-16not yet assignedNot reported[976106]
Debianwpasourcetrixie2:2.9.0-16not yet assignedNot reported[976106]
Debianwpasourcebookworm2:2.9.0-16not yet assignedNot reported[976106]
Debiangupnpsourcesid1.2.3-1not yet assignedNot reportedNot reported
Debiangupnpsourceforky1.2.3-1not yet assignedNot reportedNot reported
Debiangupnpsourcetrixie1.2.3-1not yet assignedNot reportedNot reported
Debiangupnpsourcebookworm1.2.3-1not yet assignedNot reportedNot reported
Debianminidlnasourcesid1.2.1+dfsg-3not yet assignedNot reported[976594]
Debianminidlnasourceforky1.2.1+dfsg-3not yet assignedNot reported[976594]
Debianminidlnasourcetrixie1.2.1+dfsg-3not yet assignedNot reported[976594]
Debianminidlnasourcebookworm1.2.1+dfsg-3not yet assignedNot reported[976594]
Debianpupnp-1.8sourcebookworm(unfixed)not yet assignedNot reported[983206]
Alpinehostapdapk3.102.8-r3Not reportedALPINE-CVE-2020-12695Not reported
Alpinehostapdapk3.112.9-r2Not reportedALPINE-CVE-2020-12695Not reported
Alpinehostapdapk3.122.9-r2Not reportedALPINE-CVE-2020-12695Not reported
Alpinehostapdapk3.132.9-r2Not reportedALPINE-CVE-2020-12695Not reported
Alpinehostapdapk3.142.9-r2Not reportedALPINE-CVE-2020-12695Not reported
Alpinehostapdapk3.152.9-r2Not reportedALPINE-CVE-2020-12695Not reported
Alpinehostapdapk3.162.9-r2Not reportedALPINE-CVE-2020-12695Not reported
Alpinehostapdapk3.172.9-r2Not reportedALPINE-CVE-2020-12695Not reported
Alpinehostapdapk3.182.9-r2Not reportedALPINE-CVE-2020-12695Not reported
Alpinehostapdapk3.192.9-r2Not reportedALPINE-CVE-2020-12695Not reported
Alpinehostapdapk3.202.9-r2Not reportedALPINE-CVE-2020-12695Not reported
Alpinehostapdapk3.212.9-r2Not reportedALPINE-CVE-2020-12695Not reported
Alpinehostapdapk3.222.9-r2Not reportedALPINE-CVE-2020-12695Not reported
Alpinehostapdapk3.232.9-r2Not reportedALPINE-CVE-2020-12695Not reported
Alpinehostapdapk3.242.9-r2Not reportedALPINE-CVE-2020-12695Not reported
Alpinehostapdapk3.92.7-r6Not reportedALPINE-CVE-2020-12695Not reported
Ubuntugupnpdeb20.041.2.3-0ubuntu0.20.04.1Not reportedUSN-4494-1Not reported
Ubuntuwpadebpro2.1-0ubuntu1.7+esm3Not reportedUSN-4734-2Not reported
Ubuntuwpadeb16.042.4-0ubuntu6.7Not reportedUSN-4734-1Not reported
Ubuntuwpadeb18.042:2.6-15ubuntu2.7Not reportedUSN-4734-1Not reported
Ubuntuwpadeb20.042:2.9-1ubuntu4.2Not reportedUSN-4734-1Not reported
Ubuntuminidlnadeb16.041.1.5+dfsg-2ubuntu0.1Not reportedUSN-4722-1Not reported
Ubuntuminidlnadeb18.041.2.1+dfsg-1ubuntu0.18.04.1Not reportedUSN-4722-1Not reported
Ubuntuminidlnadeb20.041.2.1+dfsg-1ubuntu0.20.04.1Not reportedUSN-4722-1Not reported
Ubuntuwpadebpro2.1-0ubuntu1.7+esm3Not reportedUBUNTU-CVE-2020-12695Not reported
Ubuntuminidlnadeb16.041.1.5+dfsg-2ubuntu0.1Not reportedUBUNTU-CVE-2020-12695Not reported
Ubuntuwpadeb16.042.4-0ubuntu6.7Not reportedUBUNTU-CVE-2020-12695Not reported
Ubuntuminidlnadeb18.041.2.1+dfsg-1ubuntu0.18.04.1Not reportedUBUNTU-CVE-2020-12695Not reported
Ubuntuwpadeb18.042:2.6-15ubuntu2.7Not reportedUBUNTU-CVE-2020-12695Not reported
Ubuntugupnpdeb20.041.2.3-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2020-12695Not reported
Ubuntuminidlnadeb20.041.2.1+dfsg-1ubuntu0.20.04.1Not reportedUBUNTU-CVE-2020-12695Not reported
Ubuntuwpadeb20.042:2.9-1ubuntu4.2Not reportedUBUNTU-CVE-2020-12695Not reported
Opensuseminidlnarpmtumbleweed1.3.0-2.7Not reportedOPENSUSE-SU-2024:11050-1Not reported
Opensuseminidlnarpmleap 15.21.3.0-lp152.4.3.1Not reportedOPENSUSE-SU-2020:2160-1Not reported
Opensusegupnprpmtumbleweed1.2.7-2.2Not reportedOPENSUSE-SU-2024:10837-1Not reported
Suseminidlnarpmpackage hub 15 sp11.3.0-bp151.2.3.1Not reportedOPENSUSE-SU-2020:2226-1Not reported
Opensuseminidlnarpmleap 15.11.3.0-lp151.3.3.1Not reportedOPENSUSE-SU-2020:2194-1Not reported
Suseminidlnarpmpackage hub 15 sp21.3.0-bp152.4.3.1Not reportedOPENSUSE-SU-2020:2204-1Not reported

[Debian bug #976106][Debian bug #976594][Debian bug #983206]

Notes

[bookworm] pupnp-1.8: Minor issue

OpenFactory catalog packages

Vulnerability data is temporarily unavailable.

References