Lucene search
K

10 matches found

Veracode
Veracode
added 2020/08/06 9:40 p.m.21 views

Denial Of Service (DoS)

libmicrodns is vulnerable to denial of service. When an error occurs while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker can send a malicious mDNS message repeatedly to trigger this vulnerability...

7.5CVSS4.3AI score0.0062EPSS
Exploits1References3Affected Software1
CNVD
CNVD
added 2020/03/25 12:0 a.m.1 views

Videolabs libmicrodns Resource Management Error Vulnerability

Videolabs libmicrodns is a cross-platform mDNS multicast DNS resolver from Videolabs Labs in France. A security vulnerability in the label parsing feature in Videolabs libmicrodns version 0.1.0 stems from the program failing to check the return value of the 'rrdecode' function when parsing...

9.8CVSS7.4AI score0.0112EPSS
Exploits1References1
NVD
NVD
added 2020/03/24 9:15 p.m.16 views

CVE-2020-6072

An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rrdecode function's return value is not checked, leading to a double free that could be exploited to execute arbitrary code. A...

9.8CVSS9.7AI score0.0112EPSS
Exploits1References3
OSV
OSV
added 2020/03/24 9:15 p.m.1 views

DEBIAN-CVE-2020-6072

An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rrdecode function's return value is not checked, leading to a double free that could be exploited to execute arbitrary code. A...

9.8CVSS9.3AI score0.0112EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2020/03/24 9:15 p.m.30 views

CVE-2020-6079

An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker...

7.5CVSS7.1AI score0.0062EPSS
Exploits1References3
OSV
OSV
added 2020/03/24 9:15 p.m.0 views

UBUNTU-CVE-2020-6072

An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rrdecode function's return value is not checked, leading to a double free that could be exploited to execute arbitrary code. A...

9.8CVSS7.8AI score0.0112EPSS
Exploits1References4
Prion
Prion
added 2020/03/24 9:15 p.m.18 views

Denial of service

An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker...

5CVSS7.8AI score0.0062EPSS
Exploits1References3Affected Software2
Talos
Talos
added 2020/03/23 12:0 a.m.35 views

Videolabs libmicrodns 0.1.0 resource allocation denial-of-service vulnerabilities

Summary Multiple exploitable denial-of-service vulnerabilities exist in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustio...

7.5CVSS8.1AI score0.0062EPSS
Exploits2
Talos
Talos
added 2020/03/23 12:0 a.m.40 views

Videolabs libmicrodns 0.1.0 rr_decode return value remote code execution vulnerability

Summary An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rrdecode function’s return value is not checked, leading to a double free that could be exploited to execute arbitrary...

9.8CVSS8.2AI score0.0112EPSS
Exploits1
Talos
Talos
added 2020/03/23 12:0 a.m.55 views

Videolabs libmicrodns 0.1.0 resource record recursive label uncompression denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the compression pointer is followed without checking for recursion, leading to a denial of service. An attack...

7.5CVSS7.4AI score0.00467EPSS
Exploits1
Rows per page
Query Builder