CVE-2020-6080 - log back

CVE-2020-6080 edited at 17 Apr 2020 21:14:37
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Remote
Type
- Unknown
+ Denial of service
Description
+ Multiple exploitable denial-of-service vulnerabilities exist in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker can send one mDNS message repeatedly to trigger these vulnerabilities.
References
+ https://talosintelligence.com/vulnerability_reports/TALOS-2020-1002
+ https://github.com/videolabs/libmicrodns/commit/9768bdbeb8ea6b7849a97af4362d1b5184352cee
CVE-2020-6080 created at 17 Apr 2020 21:11:39
Severity
+ Unknown
Remote
+ Unknown
Type
+ Unknown
Description
References
Notes