CVE-2019-14323

Name of the Vulnerable Software and Affected Versions SSDP Responder versions 1.x through 1.5

Description The issue is caused by an off-by-one error in the ssdp recv function in ssdpd.c, leading to a stack-based buffer overflow by 1 byte when handling incoming network messages. This results in a crash of the server, but only when strict stack checking is enabled.

Recommendations For SSDP Responder versions 1.x through 1.5, consider disabling strict stack checking as a temporary workaround to prevent server crashes until a patch is available.