A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files.

The remote host is affected by the vulnerability described in GLSA-202311-12 (MiniDLNA: Multiple Vulnerabilities)

  - A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to     exfiltrate media files. (CVE-2022-26505)

  - ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability     is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This     results in other code later using attacker-controlled chunk values that exceed the length of the allocated     buffer, resulting in out-of-bounds read/write. (CVE-2023-33476)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to
    exfiltrate media files. (CVE-2022-26505)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6398-1 advisory.

    It was discovered that ReadyMedia was vulnerable to DNS rebinding attacks. A remote attacker could     possibly use this issue to trick the local DLNA server to leak information. This issue only affected     Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-26505)

    It was discovered that ReadyMedia incorrectly handled certain HTTP requests using chunked transport     encoding. A remote attacker could possibly use this issue to cause buffer overflows, resulting in out-of-     bounds reads and writes. (CVE-2023-33476)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2973 advisory.

    An issue has been found in minidlna, a lightweight DLNA/UPnP-AV server targeted at embedded systems. HTTP     requests needed more checks to protect against DNS rebinding, thus forbid a remote web server to     exfiltrate media files. For Debian 9 stretch, this problem has been fixed in version 1.1.6+dfsg-1+deb9u2.
    We recommend that you upgrade your minidlna packages. For the detailed security status of minidlna please     refer to its security tracker page at: https://security-tracker.debian.org/tracker/minidlna Further     information about Debian LTS security advisories, how to apply these updates to your system and frequently     asked questions can be found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:0079-1 advisory.

  - A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to     exfiltrate media files. (CVE-2022-26505)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
186269	GLSA-202311-12 : MiniDLNA: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical
405586	Alpine: multiple minidlna packages: security update to 1.3.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
405586	Alpine: multiple minidlna packages: security update to 1.3.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
181945	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : ReadyMedia vulnerabilities (USN-6398-1)	Nessus	Ubuntu Local Security Checks	Local	critical
159632	Debian DLA-2973-1 : minidlna - LTS security update	Nessus	Debian Local Security Checks	Local	high
158883	openSUSE 15 Security Update : minidlna (openSUSE-SU-2022:0079-1)	Nessus	SuSE Local Security Checks	Local	high

Detections

Analytics

CVE-2022-26505

high

Tenable Plugins

critical

high

high

critical

high

high