Vulnerability Spotlight: Tinysvcmdns Multi-label DNS DoS Vulnerability
Summary: Cisco Talos disclosed a NULL pointer dereference vulnerability in the tinysvcmdns library, a small mDNS responder implementation for publishing services, tracked as TALOS-2017-0486 and CVE-2017-12130. The flaw lies in how tinysvcmdns parses labels in DNS requests, and an attacker could trigger it by sending a specially crafted DNS query, causing a denial of service; Snort rule 44986 detects exploitation attempts.
What you should know: The vulnerable component is an embedded mDNS responder, so the exposure sits in small networked devices rather than in a server someone patches on a schedule - and a single crafted DNS query is enough to take one down.
Read the original at Cisco Talos ↗
- Topics
- Cloud Security
- Mentions
- CVE-2017-12130
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026