Lucene search
+L

13 matches found

Veracode
Veracode
•added 2020/08/06 9:40 p.m.•68 views

Denial Of Service (DoS)

libmicrodns is vulnerable to denial of service. When an error occurs while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker can send a malicious mDNS message repeatedly to trigger this vulnerability...

7.5CVSS4.3AI score0.03146EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
•added 2020/03/25 12:00 a.m.•89 views

Videolabs libmicrodns Resource Management Error Vulnerability

Videolabs libmicrodns is a cross-platform mDNS multicast DNS resolver from Videolabs Labs in France. A security vulnerability in the label parsing feature in Videolabs libmicrodns version 0.1.0 stems from the program failing to check the return value of the 'rrdecode' function when parsing...

9.8CVSS7.4AI score0.03799EPSS
SaveExploits1References1
NVD
NVD
•added 2020/03/24 9:15 p.m.•25 views

CVE-2020-6072

An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rrdecode function's return value is not checked, leading to a double free that could be exploited to execute arbitrary code. A...

9.8CVSS9.7AI score0.03799EPSS
SaveExploits1References3
OSV
OSV
•added 2020/03/24 9:15 p.m.•6 views

DEBIAN-CVE-2020-6072

An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rrdecode function's return value is not checked, leading to a double free that could be exploited to execute arbitrary code. A...

9.8CVSS9.3AI score0.03799EPSS
SaveExploits1References1
OSV
OSV
•added 2020/03/24 9:15 p.m.•13 views

UBUNTU-CVE-2020-6072

An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rrdecode function's return value is not checked, leading to a double free that could be exploited to execute arbitrary code. A...

9.8CVSS7.8AI score0.03799EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2020/03/24 9:15 p.m.•49 views

CVE-2020-6079

An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker...

7.5CVSS7.1AI score0.03146EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2020/03/24 9:15 p.m.•8 views

CVE-2020-6079

An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker...

7.5CVSS7.1AI score0.03146EPSS
SaveExploits1References4
Prion
Prion
•added 2020/03/24 9:15 p.m.•29 views

Denial of service

An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker...

5CVSS7.8AI score0.03146EPSS
SaveExploits1References3Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/24 12:00 a.m.•2 views

CVE-2020-6079: Missing Release of Memory after Effective Lifetime

An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker...

7.5CVSS7.1AI score0.03146EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/24 12:00 a.m.•3 views

CVE-2020-6072: Double Free

An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rrdecode function's return value is not checked, leading to a double free that could be exploited to execute arbitrary code. A...

9.8CVSS8.6AI score0.03799EPSS
SaveExploits1References2
Talos
Talos
•added 2020/03/23 12:00 a.m.•71 views

Videolabs libmicrodns 0.1.0 resource record recursive label uncompression denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the compression pointer is followed without checking for recursion, leading to a denial of service. An attack...

7.5CVSS7.4AI score0.02504EPSS
SaveExploits1
Talos
Talos
•added 2020/03/23 12:00 a.m.•55 views

Videolabs libmicrodns 0.1.0 rr_decode return value remote code execution vulnerability

Summary An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rrdecode function’s return value is not checked, leading to a double free that could be exploited to execute arbitrary...

9.8CVSS8.2AI score0.03799EPSS
SaveExploits1
Talos
Talos
•added 2020/03/23 12:00 a.m.•50 views

Videolabs libmicrodns 0.1.0 resource allocation denial-of-service vulnerabilities

Summary Multiple exploitable denial-of-service vulnerabilities exist in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustio...

7.5CVSS8.1AI score0.03146EPSS
SaveExploits2
Rows per page
Query Builder