An exploitable heap overflow vulnerability exists in the tinysvcmdns library version 2016-07-18. A specially crafted packet can make the library overwrite an arbitrary amount of data on the heap with attacker controlled values. An attacker needs send a dns packet to trigger this vulnerability.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published: 2018-04-24T19:00:00Z

Updated: 2024-09-16T20:47:11.062Z

Reserved: 2017-07-31T00:00:00

Link: CVE-2017-12087

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-04-24T19:29:00.970

Modified: 2024-11-21T03:08:48.303

Link: CVE-2017-12087

cve-icon Redhat

No data.