CVE-2021-33516

An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to trick a victim's browser into triggering actions against local UPnP services implemented using this library. Depending on the affected service, this could be used for data exfiltration, data tempering, etc.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.1 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 47%
Affected Products (NVD)
VendorProductVersion
gnomegupnp
𝑥
< 1.0.7
gnomegupnp
1.1.0 ≤
𝑥
< 1.2.5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
gupnp
bookworm
1.6.3-1
fixed
bullseye
no-dsa
buster
no-dsa
sid
1.6.6-1
fixed
stretch
no-dsa
trixie
1.6.6-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gupnp
bionic
needs-triage
focal
Fixed 1.2.3-0ubuntu0.20.04.2
released
groovy
Fixed 1.2.4-1ubuntu0.20.10.1
released
hirsute
Fixed 1.2.4-1ubuntu0.21.04.1
released
impish
Fixed 1.2.4-1ubuntu1
released
jammy
Fixed 1.2.4-1ubuntu1
released
kinetic
Fixed 1.2.4-1ubuntu1
released
lunar
Fixed 1.2.4-1ubuntu1
released
mantic
Fixed 1.2.4-1ubuntu1
released
noble
Fixed 1.2.4-1ubuntu1
released
trusty
dne
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libgupnp-1_2-0
suse enterprise desktop 15 SP2
1.2.2-3.3.1
fixed
suse enterprise sap 15 SP2
1.2.2-3.3.1
fixed
suse enterprise server 15 SP2
1.2.2-3.3.1
fixed
libgupnp-1_2-1
suse enterprise desktop 15 SP5
1.4.3-150400.1.6
fixed
suse enterprise sap 15 SP5
1.4.3-150400.1.6
fixed
suse enterprise server 15 SP5
1.4.3-150400.1.6
fixed
libgupnp-1_6-0
suse enterprise desktop 15 SP6
1.6.6-150600.2.3
fixed
suse enterprise desktop 15 SP7
1.6.6-150600.2.3
fixed
suse enterprise sap 15 SP6
1.6.6-150600.2.3
fixed
suse enterprise sap 15 SP7
1.6.6-150600.2.3
fixed
suse enterprise server 15 SP6
1.6.6-150600.2.3
fixed
suse enterprise server 15 SP7
1.6.6-150600.2.3
fixed
libgupnp-devel
suse enterprise desktop 15 SP5
1.4.3-150400.1.6
fixed
suse enterprise desktop 15 SP6
1.6.6-150600.2.3
fixed
suse enterprise desktop 15 SP7
1.6.6-150600.2.3
fixed
suse enterprise sap 15 SP5
1.4.3-150400.1.6
fixed
suse enterprise sap 15 SP6
1.6.6-150600.2.3
fixed
suse enterprise sap 15 SP7
1.6.6-150600.2.3
fixed
suse enterprise server 15 SP5
1.4.3-150400.1.6
fixed
suse enterprise server 15 SP6
1.6.6-150600.2.3
fixed
suse enterprise server 15 SP7
1.6.6-150600.2.3
fixed
typelib-1_0-GUPnP-1_0
suse enterprise desktop 15 SP2
1.2.2-3.3.1
fixed
suse enterprise desktop 15 SP5
1.4.3-150400.1.6
fixed
suse enterprise desktop 15 SP6
1.6.6-150600.2.3
fixed
suse enterprise desktop 15 SP7
1.6.6-150600.2.3
fixed
suse enterprise sap 15 SP2
1.2.2-3.3.1
fixed
suse enterprise sap 15 SP5
1.4.3-150400.1.6
fixed
suse enterprise sap 15 SP6
1.6.6-150600.2.3
fixed
suse enterprise sap 15 SP7
1.6.6-150600.2.3
fixed
suse enterprise server 15 SP2
1.2.2-3.3.1
fixed
suse enterprise server 15 SP5
1.4.3-150400.1.6
fixed
suse enterprise server 15 SP6
1.6.6-150600.2.3
fixed
suse enterprise server 15 SP7
1.6.6-150600.2.3
fixed
suse enterprise workstation 15 SP2
1.2.2-3.3.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
gupnp
RHEL 7
0:1.0.2-6.el7_9
fixed
RHEL 8
0:1.0.6-2.el8_4
fixed
RHEL 8.1 E4S
0:1.0.3-3.el8_1
fixed
RHEL 8.1 EUS
0:1.0.3-3.el8_1
fixed
RHEL 8.2 AUS
0:1.0.3-3.el8_2
fixed
RHEL 8.2 E4S
0:1.0.3-3.el8_2
fixed
RHEL 8.2 EUS
0:1.0.3-3.el8_2
fixed
RHEL 8.2 TUS
0:1.0.3-3.el8_2
fixed
RHEL 8.4 AUS
0:1.0.6-2.el8_4
fixed
RHEL 8.4 E4S
0:1.0.6-2.el8_4
fixed
RHEL 8.4 EUS
0:1.0.6-2.el8_4
fixed
RHEL 8.4 TUS
0:1.0.6-2.el8_4
fixed
gupnp-devel
RHEL 7
0:1.0.2-6.el7_9
fixed
RHEL 8
0:1.0.6-2.el8_4
fixed
RHEL 8.1 E4S
0:1.0.3-3.el8_1
fixed
RHEL 8.1 EUS
0:1.0.3-3.el8_1
fixed
RHEL 8.2 AUS
0:1.0.3-3.el8_2
fixed
RHEL 8.2 E4S
0:1.0.3-3.el8_2
fixed
RHEL 8.2 EUS
0:1.0.3-3.el8_2
fixed
RHEL 8.2 TUS
0:1.0.3-3.el8_2
fixed
RHEL 8.4 AUS
0:1.0.6-2.el8_4
fixed
RHEL 8.4 E4S
0:1.0.6-2.el8_4
fixed
RHEL 8.4 EUS
0:1.0.6-2.el8_4
fixed
RHEL 8.4 TUS
0:1.0.6-2.el8_4
fixed
gupnp-docs
RHEL 7
0:1.0.2-6.el7_9
fixed
References
https://discourse.gnome.org/t/security-relevant-releases-for-gupnp-issue-cve-2021-33516/6536
https://gitlab.gnome.org/GNOME/gupnp/-/issues/24
https://discourse.gnome.org/t/security-relevant-releases-for-gupnp-issue-cve-2021-33516/6536
https://gitlab.gnome.org/GNOME/gupnp/-/issues/24