CVE-2020-6071

An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the compression pointer is followed without checking for recursion, leading to a denial of service. An attacker can send an mDNS message to trigger this vulnerability.

Score

CVSS 3.1 7.5 High

Status

Modified - talos-cna@cisco.com

Published

2020-03-24

Last modified

2026-10-08

Weaknesses

CWE-674

Affected products

• Debian Linux (Debian)
• Libmicrodns (Videolabs)

References

• https://www.debian.org/security/2020/dsa-4671
• https://security.gentoo.org/glsa/202005-10
• https://talosintelligence.com/vulnerability_reports/TALOS-2020-0994