Package: miniupnpd-iptables (2.3.9-2+deb13u1) Lightweight UPnP IGD & PCP/NAT-PMP daemon - legacy iptables backend Other Packages Related to miniupnpd-iptables: dep: [miniupnpd ]
Lightweight UPnP IGD & PCP/NAT-PMP daemon
dep: [iptables ]
administration tools for packet filtering and NAT
dep: [libc6 ] (>= 2.38)
GNU C Library: Shared libraries
dep: [libip4tc2 ] (>= 1.8.3)
netfilter libip4tc library
dep: [libip6tc2 ] (>= 1.8.3)
netfilter libip6tc library
Download miniupnpd-iptables Package file paths (10) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/etc/miniupnpd/ip6tables_init.sh /etc/miniupnpd/ip6tables_removeall.sh /etc/miniupnpd/iptables_init.sh /etc/miniupnpd/iptables_removeall.sh /etc/miniupnpd/miniupnpd_functions.sh /usr/sbin/miniupnpd /usr/share/doc/miniupnpd-iptables/changelog.Debian.gz /usr/share/doc/miniupnpd-iptables/changelog.gz /usr/share/doc/miniupnpd-iptables/copyright /usr/share/doc/miniupnpd-iptables/NEWS.Debian.gz Field source: Debian 13 (Trixie) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-107159 ] Published: Oct 7, 2026, 11:59:39 AM UTC
MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData() that allows unauthenticated local network attackers to crash the daemon. Attackers can send a
High(7.1) Affected Details (2) 2.3.9-2+deb13u1 · amd64 · trixie
Affected
nvd · miniupnpd · debian · 13
2.3.9-2+deb13u1 · arm64 · trixie
Affected
nvd · miniupnpd · debian · 13
Fixed and unaffected versions (8) CVE Severity Version impact [CVE-2026-5720 ] Published: Apr 17, 2026, 9:39:54 PM UTC
miniupnpd contains an integer underflow vulnerability in SOAPAction header parsing that allows remote attackers to cause a denial of service or information disclosure by sending a malformed SOAPAction
High(8.2) Fixed Details (2) 2.3.9-2+deb13u1 · amd64 · trixie
Fixed · Fixed: 2.3.9-2+deb13u1
nvd · miniupnpd · debian · 13
2.3.9-2+deb13u1 · arm64 · trixie
Fixed · Fixed: 2.3.9-2+deb13u1
nvd · miniupnpd · debian · 13
[CVE-2013-2600 ] Published: Nov 1, 2019, 12:15:00 PM UTC
miniupnpd: CVE-2013-2600
Medium Fixed Details (2) 2.3.9-2+deb13u1 · amd64 · trixie
Fixed · Fixed: 1.8.20130730-1
dsa · miniupnpd · debian · 13
2.3.9-2+deb13u1 · arm64 · trixie
Fixed · Fixed: 1.8.20130730-1
dsa · miniupnpd · debian · 13
[CVE-2019-12107 ] Published: May 15, 2019, 11:29:00 PM UTC
miniupnpd: CVE-2019-12107
Medium Fixed Details (2) 2.3.9-2+deb13u1 · amd64 · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
2.3.9-2+deb13u1 · arm64 · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
[CVE-2019-12108 ] Published: Feb 6, 2019, 12:00:00 AM UTC
miniupnpd: CVE-2019-12108
Medium(4.3) Fixed Details (2) 2.3.9-2+deb13u1 · amd64 · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
2.3.9-2+deb13u1 · arm64 · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
[CVE-2019-12109 ] Published: Feb 6, 2019, 12:00:00 AM UTC
miniupnpd: CVE-2019-12109
Medium(4.3) Fixed Details (2) 2.3.9-2+deb13u1 · amd64 · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
2.3.9-2+deb13u1 · arm64 · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
[CVE-2019-12110 ] Published: Feb 6, 2019, 12:00:00 AM UTC
miniupnpd: CVE-2019-12110
Medium(4.3) Fixed Details (2) 2.3.9-2+deb13u1 · amd64 · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
2.3.9-2+deb13u1 · arm64 · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
[CVE-2019-12111 ] Published: Feb 6, 2019, 12:00:00 AM UTC
miniupnpd: CVE-2019-12111
Medium(4.3) Fixed Details (2) 2.3.9-2+deb13u1 · amd64 · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
2.3.9-2+deb13u1 · arm64 · trixie
Fixed · Fixed: 2.1-6
dsa · miniupnpd · debian · 13
[CVE-2017-1000494 ] Published: Dec 10, 2017, 12:00:00 AM UTC
miniupnpc: CVE-2017-1000494
Critical(9.8) Fixed Details (2) 2.3.9-2+deb13u1 · amd64 · trixie
Fixed · Fixed: 2.0.20171212-1
dsa · miniupnpd · debian · 13
2.3.9-2+deb13u1 · arm64 · trixie
Fixed · Fixed: 2.0.20171212-1
dsa · miniupnpd · debian · 13
Last synced: Oct 28, 2026, 1:40:02 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
2.3.9-2+deb13u1 / amd64 Observed Sep 1, 2026 sha256 a4befe7291e2…6e6fed90Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): a4befe7291e2c486f2aff1c667a7bc6302221ffcb6ea4a6df0451a496e6fed90
Verify download
printf '%s %s\n' 'a4befe7291e2c486f2aff1c667a7bc6302221ffcb6ea4a6df0451a496e6fed90' 'miniupnpd-iptables_2.3.9-2+deb13u1_amd64.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) main amd64
2.3.9-2+deb13u1 / arm64 Observed Sep 1, 2026 sha256 9aeb0c3f2e4d…610ca948Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 9aeb0c3f2e4d4d24590a2f8b9e020699d60b130d7555ebc0ddaad532610ca948
Verify download
printf '%s %s\n' '9aeb0c3f2e4d4d24590a2f8b9e020699d60b130d7555ebc0ddaad532610ca948' 'miniupnpd-iptables_2.3.9-2+deb13u1_arm64.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) main arm64