ALERT: Vulnerability in UPnP library used by Bitcoin Core
1 message, 12 Oct 2015. Started by Wladimir J. van der Laan.
Wladimir J. van der Laan
TL;DR disable UPnP in Bitcoin Core as soon as possible, if you still have it enabled.
Upgrading to 0.11.1rc2 or 0.10.3rc2 will also solve the issue, as they bundle a newer libupnpc (as well as disable upnp usage by default.) However these versions are still in the release candidate cycle, there is some risk in using test versions.
See https://bitcoin.org/en/alert/2015-10-12-upnp-vulnerability for details
Wladimir