CVE-2018-4002

Name of the Vulnerable Software and Affected Versions CUJO Smart Firewall version 7003

Description A denial-of-service issue exists due to unsafe handling of label compression pointers in mDNS packets by the mdnscap binary, leading to uncontrolled recursion and eventual stack exhaustion, causing the mdnscap process to crash. An unauthenticated attacker can trigger this issue by sending a specially crafted mDNS message.

Recommendations For CUJO Smart Firewall version 7003, consider disabling the mdnscap binary or restricting its access to mDNS packets until a fix is available.