CVE-2017-12130

An exploitable NULL pointer dereference vulnerability exists in the tinysvcmdns library version 2017-11-05. A specially crafted packet can make the library dereference a NULL pointer leading to a server crash and denial of service. An attacker needs to send a DNS query to trigger this vulnerability.

Score

CVSS 3.1 7.5 High

Status

Modified - talos-cna@cisco.com

Published

2018-01-20

Last modified

2024-09-16

Weaknesses

CWE-476

Affected products

• Tinysvcmdns (Talos)
• Tinysvcmdns (Tinysvcmdns Project)

References

• http://www.securityfocus.com/bid/102795
• https://talosintelligence.com/vulnerability_reports/TALOS-2017-0486