Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x6vq-vc9q-792p

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if an invalid query name is encountered, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.

An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if an invalid query name is encountered, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.

EPSS

Процентиль: 79%
0.01217
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-415

Связанные уязвимости

CVSS3: 9.8
nvd
почти 7 лет назад

An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if an invalid query name is encountered, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.

EPSS

Процентиль: 79%
0.01217
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-415