An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker can send one mDNS message repeatedly to trigger this vulnerability through the function rr_read_RR [5] reads the current resource record, except for the RDATA section. This is read by the loop at in rr_read. For each RR type, a different function is called. When the RR type is 0x10, the function rr_read_TXT is called at [6].
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
 Debian DSA |
DSA-4671-1 | vlc security update |
 EUVD |
EUVD-2020-27234 | An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker can send one mDNS message repeatedly to trigger this vulnerability through the function rr_read_RR [5] reads the current resource record, except for the RDATA section. This is read by the loop at in rr_read. For each RR type, a different function is called. When the RR type is 0x10, the function rr_read_TXT is called at [6]. |
 Ubuntu USN |
USN-7239-1 | libmicrodns vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: talos
Published:
Updated: 2024-08-04T08:47:40.959Z
Reserved: 2020-01-07T00:00:00
Link: CVE-2020-6080
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-03-24T21:15:14.473
Modified: 2024-11-21T05:35:03.363
Link: CVE-2020-6080
Redhat
No data.
OpenCVE Enrichment
No data.