CVE-2020-6071

Name of the Vulnerable Software and Affected Versions Videolabs libmicrodns version 0.1.0

Description A denial-of-service issue exists in the resource record-parsing functionality of libmicrodns. When parsing compressed labels in mDNS messages, the compression pointer is followed without checking for recursion, leading to a denial of service. An attacker can send an mDNS message to trigger this issue. The vulnerability is also related to a buffer overflow in memory, which can be exploited by a remote attacker to cause a denial of service or potentially execute arbitrary code using a specially crafted request.

Recommendations For libmicrodns version 0.1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.