Package: miniupnpd (2.3.9-2+deb13u1) Lightweight UPnP IGD & PCP/NAT-PMP daemon Other Packages Related to miniupnpd: [debconf ]
Debian configuration management system
[uuid-runtime ]
runtime components for the Universally Unique ID library
[miniupnpd-nftables ]
Lightweight UPnP IGD & PCP/NAT-PMP daemon - nftables backend
[miniupnpd-iptables ]
Lightweight UPnP IGD & PCP/NAT-PMP daemon - legacy iptables backend
[debconf ] (>= 0.5)
Debian configuration management system
Package not available
[init-system-helpers ] (>= 1.51)
helper tools for all init systems
Package file paths (0) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
No package-associated file paths were observed for the displayed build metadata.
Field source: Debian 13 (Trixie) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-107159 ] Published: Oct 7, 2026, 11:59:39 AM UTC
MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData() that allows unauthenticated local network attackers to crash the daemon. Attackers can send a
High(7.1) Affected Details (2) 2.3.9-2+deb13u1 · all · trixie
Affected
nvd · miniupnpd · debian · 13
2.3.9-2+deb13u1 · all · trixie
Affected
nvd · miniupnpd · debian · 13
Fixed and unaffected versions (8) CVE Severity Version impact [CVE-2026-5720 ] Published: Apr 17, 2026, 9:39:54 PM UTC
miniupnpd contains an integer underflow vulnerability in SOAPAction header parsing that allows remote attackers to cause a denial of service or information disclosure by sending a malformed SOAPAction
High(8.2) Fixed Details (2) 2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 2.3.9-2+deb13u1
nvd · miniupnpd · debian · 13
2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 2.3.9-2+deb13u1
nvd · miniupnpd · debian · 13
[CVE-2013-2600 ] Published: Nov 1, 2019, 12:15:00 PM UTC
miniupnpd: CVE-2013-2600
Medium Fixed Details (2) 2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 1.8.20130730-1
dsa · miniupnpd · debian · 13
2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 1.8.20130730-1
dsa · miniupnpd · debian · 13
[CVE-2019-12107 ] Published: May 15, 2019, 11:29:00 PM UTC
miniupnpd: CVE-2019-12107
Medium Fixed Details (2) 2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
[CVE-2019-12108 ] Published: Feb 6, 2019, 12:00:00 AM UTC
miniupnpd: CVE-2019-12108
Medium(4.3) Fixed Details (2) 2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
[CVE-2019-12109 ] Published: Feb 6, 2019, 12:00:00 AM UTC
miniupnpd: CVE-2019-12109
Medium(4.3) Fixed Details (2) 2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
[CVE-2019-12110 ] Published: Feb 6, 2019, 12:00:00 AM UTC
miniupnpd: CVE-2019-12110
Medium(4.3) Fixed Details (2) 2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
[CVE-2019-12111 ] Published: Feb 6, 2019, 12:00:00 AM UTC
miniupnpd: CVE-2019-12111
Medium(4.3) Fixed Details (2) 2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
[CVE-2017-1000494 ] Published: Dec 10, 2017, 12:00:00 AM UTC
miniupnpc: CVE-2017-1000494
Critical(9.8) Fixed Details (2) 2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 2.0.20171212-1
dsa · miniupnpd · debian · 13
2.3.9-2+deb13u1 · all · trixie
Fixed · Fixed: 2.0.20171212-1
dsa · miniupnpd · debian · 13
Last synced: Oct 28, 2026, 1:40:02 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
2.3.9-2+deb13u1 / all Observed Sep 1, 2026 sha256 ac6414b71c27…5f202042Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): ac6414b71c2708d1d1742271e822d107fd361a50191ab1c49b0680d45f202042
Verify download
printf '%s %s\n' 'ac6414b71c2708d1d1742271e822d107fd361a50191ab1c49b0680d45f202042' 'miniupnpd_2.3.9-2+deb13u1_all.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) main amd64
2.3.9-2+deb13u1 / all Observed Sep 1, 2026 sha256 ac6414b71c27…5f202042Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): ac6414b71c2708d1d1742271e822d107fd361a50191ab1c49b0680d45f202042
Verify download
printf '%s %s\n' 'ac6414b71c2708d1d1742271e822d107fd361a50191ab1c49b0680d45f202042' 'miniupnpd_2.3.9-2+deb13u1_all.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) main arm64
