CVE-2017-12130

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-01-20 · updated 2026-06-17
Weakness: CWE-476

Description

An exploitable NULL pointer dereference vulnerability exists in the tinysvcmdns library version 2017-11-05. A specially crafted packet can make the library dereference a NULL pointer leading to a server crash and denial of service. An attacker needs to send a DNS query to trigger this vulnerability.

Affected products

Talos Tinysvcmdns: 2017-11-05

References

http://www.securityfocus.com/bid/102795
https://talosintelligence.com/vulnerability_reports/TALOS-2017-0486
http://www.securityfocus.com/bid/102795
https://talosintelligence.com/vulnerability_reports/TALOS-2017-0486

Get alerted when CVE-2017-12130 or the next vulnerability affects your stack