Ethereum eth (cpp-ethereum) 潜在安全漏洞警告
Security Advisory [eth (cpp-ethereum) potentially vulnerable if running with UPnP enabled]
Ethereum 发布安全警告，指出 eth (cpp-ethereum) 客户端在启用 UPnP 功能时可能存在远程代码执行漏洞，建议用户禁用 UPnP 功能以降低风险。
Affected configurations: Issue reported for eth (cpp-ethereum).
Likelihood: Medium
Severity: High
Impact: Potentially achieve remote code execution on a machine running eth (cpp-ethereum)
Details:
A vulnerability found in the MiniUPnP library can potentially affect eth clients running with UPnP enabled.
Effects on expected chain reorganisation depth: none
Remedial action taken by Ethereum: We are verifying whether this can indeed affect cpp-ethereum and will post an update shortly.
Proposed temporary workaround: Only run eth (cpp-ethereum) with UPNP disabledby passing --upnp off to eth.
ADVISORY: Disable UPnP if running the eth client (cpp-ethereum).
来源：Ethereum Blog · blog.ethereum.org