Vulnerabilities

TI-2019-07140 CVE-2019-9748 · GHSA-7425-crxp-55qx

In tinysvcmdns through 2018-01-16, an mDNS server processing a crafted packet can perform…

MEDIUM 44

In tinysvcmdns through 2018-01-16, an mDNS server processing a crafted packet can perform arbitrary data read operations up to 16383 bytes from the start of the buffer.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02418 Published 2019-03-13 No fix listed CWE-125

TI-2019-07139 CVE-2019-9747 · GHSA-6729-2hp6-xxx8

In tinysvcmdns through 2018-01-16, a maliciously crafted mDNS (Multicast DNS) packet…

LOW 36

In tinysvcmdns through 2018-01-16, a maliciously crafted mDNS (Multicast DNS) packet triggers an infinite loop while parsing an mDNS query.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0139 Published 2019-03-13 No fix listed CWE-835

TI-2017-08881 CVE-2017-12087 · GHSA-cf6x-64rm-85pr

Memory corruption in geekman Tinysvcmdns

MEDIUM 47

An exploitable heap overflow vulnerability exists in the tinysvcmdns library version 2016-07-18.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01985 Published 2018-04-24 No fix listed CWE-119

TI-2017-08923 CVE-2017-12130 · GHSA-w7w4-rx65-9vww

NULL pointer dereference in Talos Tinysvcmdns

LOW 37

An exploitable NULL pointer dereference vulnerability exists in the tinysvcmdns library version 2017-11-05.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02426 Published 2018-01-20 No fix listed CWE-476

Vulnerabilities

Filters

In tinysvcmdns through 2018-01-16, an mDNS server processing a crafted packet can perform…

In tinysvcmdns through 2018-01-16, a maliciously crafted mDNS (Multicast DNS) packet…

Memory corruption in geekman Tinysvcmdns

NULL pointer dereference in Talos Tinysvcmdns