An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker can send one mDNS message repeatedly to trigger this vulnerability through decoding of the domain name performed by rr_decode.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 7.5 · videolabs, debianNVD modified 2026-10-08 22:17
Affected (CPE criteria) 3
cpe:2.3:a:videolabs:libmicrodns:0.1.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
References 6
- https://security.gentoo.org/glsa/202005-10 Third Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1002 Exploit, Technical Description, Third Party Advisory
- https://www.debian.org/security/2020/dsa-4671 Third Party Advisory
- https://security.gentoo.org/glsa/202005-10 Third Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1002 Exploit, Technical Description, Third Party Advisory
- https://www.debian.org/security/2020/dsa-4671 Third Party Advisory