CVE-2019-9748

In tinysvcmdns through 2018-01-16, an mDNS server processing a crafted packet can perform arbitrary data read operations up to 16383 bytes from the start of the buffer. This can lead to a segmentation fault in uncompress_nlabel in mdns.c and a crash of the server (depending on the memory protection of the CPU and the operating system), or disclosure of memory content via error messages or a server response. NOTE: the product's web site states "This project is un-maintained, and has been since 2013. ... There are known vulnerabilities ... You are advised to NOT use this library for any new projects / products."

• CWE-125

• https://bitbucket.org/geekman/tinysvcmdns/issues/10/arbitrary-memory-read-while-parsingExploit, Third Party Advisory
• https://bitbucket.org/geekman/tinysvcmdns/issues/10/arbitrary-memory-read-while-parsingExploit, Third Party Advisory

Published

Mar 13, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9742gdwfpcd.sys in G Data Total Security before 2019-02-22 allow…
• CVE-2019-9743An issue was discovered on PHOENIX CONTACT RAD-80211-XD and …
• CVE-2019-9744An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, …
• CVE-2019-9745CloudCTI HIP Integrator Recognition Configuration Tool allow…7.8
• CVE-2019-9746In libwebm before 2019-03-08, a NULL pointer dereference cau…
• CVE-2019-9747In tinysvcmdns through 2018-01-16, a maliciously crafted mDN…
• CVE-2019-9749An issue was discovered in the MQTT input plugin in Fluent B…7.5
• CVE-2019-9750In IoTivity through 1.3.1, the CoAP server interface can be …
• CVE-2019-9751An issue was discovered in Open Ticket Request System (OTRS)…
• CVE-2019-9752An issue was discovered in Open Ticket Request System (OTRS)…5.4
• CVE-2019-9753An issue was discovered in Open Ticket Request System (OTRS)…3.5
• CVE-2019-9754An issue was discovered in Tiny C Compiler (aka TinyCC or TC…