CVE:CVE-2015-6031
CNNVD:CNNVD-201511-006
MiniUPnP Client（又名MiniUPnPc）是MiniUPnP项目开发的一个能够实现应用程序使用支持UPnP的Internet网关设备转发端口的库。
MiniUPnP Client 1.9.20150917之前版本的igd_desc_parse.c文件中的‘IGDstartelt’函数存在缓冲区溢出漏洞。远程攻击者可借助较长的XML元素名称利用该漏洞造成拒绝服务（应用程序崩溃），并执行任意代码。
solution:Upgrade miniupnp_project miniupnpc to a higher version than 1.9,1.9:2014-02-03,1.9:2014-02-05,1.9:2014-05-15,1.9:2014-06-10,1.9:2014-07-01,1.9:2014-09-06,1.9:2014-09-11,1.9:2014-11-05,1.9:2014-11-13,1.9:2014-11-17,1.9:2015-04-27,1.9:2015-04-30,1.9:2015-05-22,1.9:2015-06-16,1.9:2015-07-15,1.9:2015-07-22,1.9:2015-07-23,1.9:2015-08-16,1.9:2015-08-27,1.9:2015-08-28,1.9:2015-09-15,and avoid the version (,1.9],1.9:2014-02-03,1.9:2014-02-05,1.9:2014-05-15,1.9:2014-06-10,1.9:2014-07-01,1.9:2014-09-06,1.9:2014-09-11,1.9:2014-11-05,1.9:2014-11-13,1.9:2014-11-17,1.9:2015-04-27,1.9:2015-04-30,1.9:2015-05-22,1.9:2015-06-16,1.9:2015-07-15,1.9:2015-07-22,1.9:2015-07-23,1.9:2015-08-16,1.9:2015-08-27,1.9:2015-08-28,1.9:2015-09-15; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,and avoid the version 12.04,14.04,15.04; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2