Vulnerability Spotlight: Multiple vulnerabilities in Videolabs libmicrodns
Summary: Cisco Talos disclosed multiple vulnerabilities in Videolabs libmicrodns 0.1.0, the mDNS library used by VLC media player for service discovery, including code execution and denial-of-service flaws triggered by sending crafted mDNS messages. The issues include an unchecked rr_decode return value leading to a double free (CVE-2020-6072), an unchecked compression pointer causing recursion (CVE-2020-6071), integer overflows in TXT record RDATA parsing (CVE-2020-6073), an out-of-bounds read from improper message bounds tracking (CVE-2020-6077), an unchecked mdns_read_header return value causing a null pointer dereference (CVE-2020-6078), and unfreed memory on parse errors leading to resource exhaustion (CVE-2020-6079 and CVE-2020-6080).
Key Takeaway: These flaws sit in a library that VLC uses for mDNS service discovery, so a single crafted mDNS message can crash the service or, in the case of CVE-2020-6072, potentially execute arbitrary code - and Talos published Snort rules 47811, 53071, 53046, 53099, 53102, and 53103 for detection.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-6072CVE-2020-6073CVE-2020-6077CVE-2020-6078CVE-2020-6079CVE-2020-6080
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026