Description (CNA)
An exploitable heap overflow vulnerability exists in the tinysvcmdns library version 2016-07-18. A specially crafted packet can make the library overwrite an arbitrary amount of data on the heap with attacker controlled values. An attacker needs send a dns packet to trigger this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| geekman / Tinysvcmdns | affected 2016-07-18 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.