An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rr_decode function's return value is not checked, leading to a double free that could be exploited to execute arbitrary code. An attacker can send an mDNS message to trigger this vulnerability.

The remote host is affected by the vulnerability described in GLSA-202005-10 (libmicrodns: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libmicrodns. Please       review the CVE identifiers and the upstream advisory referenced below for       details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The version of VLC media player installed on the remote Windows host is prior to 3.0.9. It is, therefore, affected by multiple vulnerabilities:

  - An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs     libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the compression pointer is followed without checking     for recursion, leading to a denial of service. An attacker can send an mDNS message to trigger this vulnerability     (CVE-2020-6071).     

  - An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0.     When parsing compressed labels in mDNS messages, the rr_decode function's return value is not checked, leading to a     double free that could be exploited to execute arbitrary code. An attacker can send an mDNS message to trigger this     vulnerability (CVE-2020-6072).

  - An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0.     When parsing the RDATA section in a TXT record in mDNS messages, multiple integer overflows can be triggered, leading to a denial     of service. An attacker can send an mDNS message to trigger this vulnerability (CVE-2020-6073).

  - An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0.     When parsing mDNS messages, the implementation does not properly keep track of the available data in the message, possibly leading     to an out-of-bounds read that would result in a denial of service. An attacker can send an mDNS message to trigger this     vulnerability (CVE-2020-6077).

  - An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0.     When parsing mDNS messages in mdns_recv, the return value of the mdns_read_header function is not checked, leading to an uninitialized     variable usage that eventually results in a null pointer dereference, leading to service crash. An attacker can send a series of     mDNS messages to trigger this vulnerability (CVE-2020-6078).

  - An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0.     When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service     condition via resource exhaustion. An attacker can send one mDNS message repeatedly to trigger this vulnerability through decoding     of the domain name performed by rr_decode (CVE-2020-6079).

Multiple security issues were discovered in the microdns plugin of the VLC media player, which could result in denial of service or potentially the execution of arbitrary code via malicious mDNS packets.

ID	Name	Product	Family	Severity
136640	GLSA-202005-10 : libmicrodns: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
136422	VLC < 3.0.9 Multiple Vulnerabilities	Nessus	Windows	critical
136291	Debian DSA-4671-1 : vlc - security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2020-6072

critical

Tenable Plugins

critical

critical

critical