EXPOSURES › CVE-2020-6072
CVE-2020-6072
CRITICAL
DETAIL
SourceNVD · cve
Published2020-03-24
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2020-6072 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
DESCRIPTION
An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rr_decode function's return value is not checked, leading to a double free that could be exploited to execute arbitrary code. An attacker can send an mDNS message to trigger this vulnerability.
SENTIMENT · TRUSTED SOURCES
synthesis
severe-fallout
-0.60
Vulnerability in Debian's Videolabs libmicrodns package, allowing arbitrary code execution via mDNS messages, represents a severe security failure with potential for widespread exploitation.
Severe vulnerability in Debian's libmicrodns package, allowing arbitrary code execution via mDNS messages, is a critical security flaw that could be exploited by attackers.
"An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rr_decode function's return value is not checked, leading to a double free that could be exploited to execute arbitrary code."
No usable content; source returned a connection error and provided no information about the vulnerability or vendor response.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.