hugo/content/about/security/advisories/cve-2008-2957-00.md@8400662befb3
hugo/content/about/security/advisories/cve-2008-2957-00.md
Fri, 28 Feb 2025 00:58:39 -0600
- author
- Gary Kramlich <grim@reaperworld.com>
- date
- Fri, 28 Feb 2025 00:58:39 -0600
- changeset 547
- 8400662befb3
- parent 394
- c83367e9b2db
- permissions
- -rw-r--r--
Add the Meshtastic plugin
I meant to add this awhile ago but somehow missed it.
Testing Done:
Ran `npm run hugo:server` and verified the plugin showed up.
Reviewed at https://reviews.imfreedom.org/r/3861/
--- title: cve-2008-2957-00 date: 2008-05-11T00:00:00.000Z cveNumber: cve-2008-2957 summary: Remote UPnP discovery DoS discoveredBy: Andrew Hunt and Christian Grothoff fixedInRelease: 2.5.0 type: security layout: cve hidden: true --- ### Description The UPnP functionality in libpurple allows remote attackers to trigger the download of arbitrary files and cause a denial of service (memory or disk consumption) via a UDP packet that specifies an arbitrary URL. ### Mitigation UPnP related downloads are limited to 128kB.
