An AddPortMapping Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in upnpredirect.c.
{ "vanir_signatures": [ { "target": { "file": "miniupnpd/upnpredirect.c" }, "id": "CVE-2019-12110-918075a6", "signature_version": "v1", "digest": { "line_hashes": [ "302155318186530469715069976551157642770", "156596148470563530952199704557659803274", "187644024402815536344550685239428136088", "6866803136802379690709100977440090350" ], "threshold": 0.9 }, "source": "https://github.com/miniupnp/miniupnp/commit/f321c2066b96d18afa5158dfa2d2873a2957ef38", "signature_type": "Line", "deprecated": false }, { "target": { "file": "miniupnpd/upnpredirect.c", "function": "upnp_redirect" }, "id": "CVE-2019-12110-ce1af364", "signature_version": "v1", "digest": { "length": 2141.0, "function_hash": "233203870663409224735262353492765677469" }, "source": "https://github.com/miniupnp/miniupnp/commit/f321c2066b96d18afa5158dfa2d2873a2957ef38", "signature_type": "Function", "deprecated": false } ] }