Summary
It was discovered that libmicrodns could recursively follow the same
compression pointer, leading to an infinite loop. An attacker could
possibly use this issue to cause a denial of service. (CVE-2020-6071)
It was discovered that libmicrodns did not check the return value of the
rr_decode function, which could lead to a double free. An attacker could
possibly use this issue to execute arbitrary code. (CVE-2020-6072)
It was discovered that libmicrodns incorrectly handled certain inputs,
which could lead to an integer overflow. An attacker could possibly use
this issue to cause a denial of service. (CVE-2020-6073)
It was discovered that libmicrodns incorrectly handled certain inputs,
which could lead to a out-of-bounds read. An attacker could possibly use
this issue to cause a denial of service. (CVE-2020-6077)
It was discovered that libmicrodns incorrectly handled memory when parsing
mDNS messages in mdns_recv, which could lead to a NULL pointer dereference.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2020-6078)
It was discovered that libmicrodns incorrectly handled memory, which could
lead to excessive memory consumption due to memory leaks. An attacker
could possibly use this issue to cause a denial of service.
(CVE-2020-6079, CVE-2020-6080)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libmicrodns | 0.0.8-1ubuntu0.1~esm1 |
Vulnerabilities 7
-
Critical 9.8
An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. W…
-
High 7.5
An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicr…
-
High 7.5
An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns …
-
High 7.5
An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1…
-
High 7.5
An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1…
-
High 7.5
An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.…
-
High 7.5
An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.…
References
-
report
https://ubuntu.com/security/CVE-2020-6071
-
report
https://ubuntu.com/security/CVE-2020-6072
-
report
https://ubuntu.com/security/CVE-2020-6073
-
report
https://ubuntu.com/security/CVE-2020-6077
-
report
https://ubuntu.com/security/CVE-2020-6078
-
report
https://ubuntu.com/security/CVE-2020-6079
-
report
https://ubuntu.com/security/CVE-2020-6080