TI-2017-08881 CVE-2017-12087 · GHSA-cf6x-64rm-85pr
Memory corruption in geekman Tinysvcmdns
Priority MEDIUM 47
An exploitable heap overflow vulnerability exists in the tinysvcmdns library version 2016-07-18.
No Tinysvcmdns Project vulnerabilities are listed in CISA KEV.
4 records
An exploitable heap overflow vulnerability exists in the tinysvcmdns library version 2016-07-18.
In tinysvcmdns through 2018-01-16, an mDNS server processing a crafted packet can perform arbitrary data read operations up to 16383 bytes from the start of the buffer.
An exploitable NULL pointer dereference vulnerability exists in the tinysvcmdns library version 2017-11-05.
In tinysvcmdns through 2018-01-16, a maliciously crafted mDNS (Multicast DNS) packet triggers an infinite loop while parsing an mDNS query.