436 matches found
CVE-2020-26966
CVE-2020-26966 affects Mozilla Firefox (Windows only) and Thunderbird; the issue arises from a memory leak via broadcasting of single-word search queries as mDNS requests on the local network. Affected products include Firefox before version 83, Firefox ESR before 78.5, and Thunderbird before 78....
Information Disclosure
firefox is vulnerable to information disclosure. Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak...
CVE-2020-26966
Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak. Note: This issue only affected Windows operating systems. Other operating systems are unaffected.. This...
KLA12012 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, perform cross-site scripting attack, obtain sensitive information, bypass security restrictions, spoof user interface. Below is a...
Security Vulnerabilities fixed in Firefox ESR 78.5 — Mozilla
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. When drawing a...
Security Vulnerabilities fixed in Thunderbird 78.5 — Mozilla
A parsing and event loading mismatch in Thunderbird's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. When drawing a...
The vulnerability of the mDNS protocol in the Cisco IOS XE operating system for Cisco Catalyst 9000 Series network devices allows a attacker to induce a service failure.
The vulnerability of the mDNS protocol in Cisco IOS XE operating systems and Cisco Catalyst 9000 Series networking devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
CVE-2020-3359
A vulnerability in the multicast DNS mDNS feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper validation of mDNS packets. An attacker...
CVE-2020-3359
CVE-2020-3359 affects Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers. The issue stems from improper validation in the multicast DNS (mDNS) feature, allowing an unauthenticated remote attacker to cause a DoS by sending a crafted mDNS packet, potentially causing the devic...
Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS Denial of Service Vulnerability
A vulnerability in the multicast DNS mDNS feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper validation of mDNS packets. An attacker...
Cisco Webex Meetings Client for MacOS Information Disclosure (cisco-sa-webex-info-disc-OHqg982)
According to its self-reported version, Cisco Webex Meetings Client for MacOS is affected by an information disclosure vulnerability in the multicast DNS mDNS protocol configuration due to sensitive information being included in the mDNS reply. An unauthenticated, adjacent attacker can exploit...
Denial-of-service
An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns. When parsing mDNS messages in mdnsrecv, the return value of the mdnsreadheader function is not checked, leading to an uninitialized variable usage that eventually results in a null...
Denial Of Service (DoS)
libmicrodns is vulnerable to denial of service. When an error occurs while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker can send a malicious mDNS message repeatedly to trigger this vulnerability...
Remote Code Execution (RCE)
An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns . When parsing compressed labels in mDNS messages, the rrdecode function's return value is not checked, leading to a double free that could be exploited to execute arbitrary code. An...
Denial Of Service (DoS)
libmicrodns is vulnerable to denial of service. When parsing the RDATA section in a TXT record in mDNS messages, multiple integer overflows can be triggered, leading to a denial of service. An attacker can send a malicious mDNS message to exploit the vulnerability...
libmicrodns: Multiple vulnerabilities
Background libmicrodns is an mDNS library, focused on being simple and cross-platform. Description Multiple vulnerabilities have been discovered in libmicrodns. Please review the CVE identifiers and the upstream advisory referenced below for details. Impact Please review the referenced CVE...
VLC < 3.0.9 Multiple Vulnerabilities
The version of VLC media player installed on the remote Windows host is prior to 3.0.9. It is, therefore, affected by multiple vulnerabilities: - An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing...
KLA11759 Multiple vulnerabilities in VLC media player
Multiple vulnerabilities were found in VLC media player. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Vulnerability related to parsing compressed labels in mDNS messages can be exploited to...
Denial Of Service (DoS)
avahi is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the Avahi daemon avahi-daemon processed multicast DNS mDNS packets with an empty payload. An attacker on the local network could use this flaw to cause avahi-daemon on a target system to enter an...
Denial Of Service (DoS)
Avahi is vulnerable to Denial Of Service DoS. Due to the way the Avahi daemon avahi-daemon processed Multicast DNS mDNS packets with corrupted checksums, an attacker on the local network could use this flaw to cause avahi-daemon on a target system to exit unexpectedly via specially-crafted mDNS...