CVE-2020-6071 - log back

CVE-2020-6071 edited at 17 Apr 2020 20:58:00
References
https://talosintelligence.com/vulnerability_reports/TALOS-2020-0994
+ https://github.com/videolabs/libmicrodns/commit/0103f40371cd6e5f034d1ea5674cd33316fef518
CVE-2020-6071 edited at 17 Apr 2020 20:56:53
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Remote
Type
- Unknown
+ Denial of service
Description
+ An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the compression pointer is followed without checking for recursion, leading to a denial of service. An attacker can send an mDNS message to trigger this vulnerability.
References
+ https://talosintelligence.com/vulnerability_reports/TALOS-2020-0994
Notes
CVE-2020-6071 created at 17 Apr 2020 20:55:55