p PatchFirst

CVE-2020-6077

CVE-2020-6077

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages, the implementation does not properly keep track of the available data in the message, possibly leading to an out-of-bounds read that would result in a denial of service. An attacker can send an mDNS message to trigger this vulnerability.

CVSS 7.5 · High · EPSS 2.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • videolabs

    Versions
    • Videolabs libmicrodns 0.1.0: Affected

    No fix published

  • libmicrodns Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.2.0-1

    Update to 0.2.0-1

  • libmicrodns Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.2.0-1

    Update to 0.2.0-1

  • vlc Debian:12

    Affected ranges
    • ECOSYSTEM: < 3.0.8-4

    Update to 3.0.8-4

  • vlc Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.0.8-4

    Update to 3.0.8-4

  • vlc Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.0.8-4

    Update to 3.0.8-4

  • libmicrodns Ubuntu:Pro:18.04:LTS

    Versions
    • 0.0.7-2
    • 0.0.8-1
    Affected ranges
    • ECOSYSTEM: < 0.0.8-1ubuntu0.1~esm1

    Update to 0.0.8-1ubuntu0.1~esm1

Original sources

Check your server →