{ "data_type": "CVE", "data_format": "MITRE", "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2020-6079", "ASSIGNER": "talos-cna@cisco.com", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "n/a", "product": { "product_data": [ { "product_name": "Videolabs", "version": { "version_data": [ { "version_value": "Videolabs libmicrodns 0.1.0" } ] } } ] } } ] } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "denial of service" } ] } ] }, "references": { "reference_data": [ { "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2020-1002", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2020-1002" }, { "refsource": "DEBIAN", "name": "DSA-4671", "url": "https://www.debian.org/security/2020/dsa-4671" }, { "refsource": "GENTOO", "name": "GLSA-202005-10", "url": "https://security.gentoo.org/glsa/202005-10" } ] }, "description": { "description_data": [ { "lang": "eng", "value": "An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker can send one mDNS message repeatedly to trigger this vulnerability through decoding of the domain name performed by rr_decode." } ] } }