CVE-2020-6072

CVE-2020-6072 affects libmicrodns 0.1.0 in the label-parsing path. The rr_decode return value is not checked when parsing compressed labels in mDNS messages, leading to a double free that can be exploited to execute arbitrary code. Impact is remote via crafted mDNS traffic; affected components ar...

CVE-2020-6072

An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rrdecode function's return value is not checked, leading to a double free that could be exploited to execute arbitrary code. A...

CVE-2020-6072

An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rrdecode function's return value is not checked, leading to a double free that could be exploited to execute arbitrary code. A...

CVE-2020-6071

CVE-2020-6071 affects Videolabs libmicrodns 0.1.0, where the mDNS label parsing uses compressed pointers without recursion checks. This can allow a remote attacker to trigger a denial-of-service via crafted mDNS messages that exploit the compression pointer handling. Public references in connecte...

CVE-2020-6073

An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing the RDATA section in a TXT record in mDNS messages, multiple integer overflows can be triggered, leading to a denial of service. An attacker can send an mDNS...

CVE-2020-6073

CVE-2020-6073 affects Videolabs libmicrodns 0.1.0. A vulnerability in the TXT record parsing functionality (RDATA in TXT records) can trigger multiple integer overflows when processing mDNS messages, leading to a denial of service. Exploitation is possible remotely by sending crafted mDNS traffic...

CVE-2020-6073

An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing the RDATA section in a TXT record in mDNS messages, multiple integer overflows can be triggered, leading to a denial of service. An attacker can send an mDNS...

CVE-2020-6073

An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing the RDATA section in a TXT record in mDNS messages, multiple integer overflows can be triggered, leading to a denial of service. An attacker can send an mDNS...

CVE-2020-6078

An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages in mdnsrecv, the return value of the mdnsreadheader function is not checked, leading to an uninitialized variable usage that eventually results in ...

CVE-2020-6078

An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages in mdnsrecv, the return value of the mdnsreadheader function is not checked, leading to an uninitialized variable usage that eventually results in ...

CVE-2020-6078

libmicrodns 0.1.0 is affected by CVE-2020-6078, where mdns_recv does not validate the return value of mdns_read_header, causing uninitialized variable usage and a null pointer dereference that can crash the service. This is one of multiple mDNS-related issues reported for libmicrodns. Evidence in...

CVE-2020-6078

An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages in mdnsrecv, the return value of the mdnsreadheader function is not checked, leading to an uninitialized variable usage that eventually results in ...

CVE-2020-6077

An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages, the implementation does not properly keep track of the available data in the message, possibly leading to an out-of-bounds read that would result ...

CVE-2020-6077

Libmicrodns 0.1.0 from Videolabs contains a denial-of-service vulnerability in the mDNS message parsing that can lead to an out-of-bounds read. The issue arises when parsing mDNS messages and not properly tracking available data, enabling an attacker to trigger a crash. Affected component: libmic...

CVE-2020-6077

An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages, the implementation does not properly keep track of the available data in the message, possibly leading to an out-of-bounds read that would result ...

CVE-2020-6077

An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages, the implementation does not properly keep track of the available data in the message, possibly leading to an out-of-bounds read that would result ...

PT-2020-2144 · Videolabs +2 · Libmicrodns +2

Name of the Vulnerable Software and Affected Versions: Videolabs libmicrodns version 0.1.0 Description: The issue is related to a buffer overflow in the microdns library of the VideoLAN VLC media player, allowing a remote attacker to cause a denial of service or execute arbitrary code using a...

PT-2020-2816 · Videolabs +1 · Libmicrodns +1

Name of the Vulnerable Software and Affected Versions: Videolabs libmicrodns version 0.1.0 Description: An exploitable denial-of-service issue exists in the resource allocation handling of Videolabs libmicrodns. When encountering errors while parsing mDNS messages, some allocated data is not free...

PT-2020-2143 · Videolabs +1 · Libmicrodns +1

Name of the Vulnerable Software and Affected Versions: Videolabs libmicrodns version 0.1.0 Description: A denial-of-service issue exists in the resource record-parsing functionality of libmicrodns. When parsing compressed labels in mDNS messages, the compression pointer is followed without checki...

PT-2020-2147 · Videolabs +1 · Libmicrodns +1

Name of the Vulnerable Software and Affected Versions: Videolabs libmicrodns version 0.1.0 Description: The issue is related to the message-parsing functionality. When parsing mDNS messages in mdns recv, the return value of the mdns read header function is not checked, leading to an uninitialized...