mDNSResponder vulnerabilities
3 known CVE vulnerabilities in mDNSResponder, translated and rated.
- CVE-2022-23748HighActively exploited
mDNSResponder.exe is vulnerable to a DLL Sideloading attack. The executable improperly specifies how to load the DLL, from which folder and under what conditions. An attacker could use the legitimate executable to load malicious files.
- CVE-2015-7988Critical
The handle_regservice_request function in mDNSResponder before version 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.
- CVE-2015-7987Critical
Multiple buffer overflows in mDNSResponder before version 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations. The issues involve the GetValueForIPv4Addr, GetValueForMACAddr, rfc3110_import, and CopyNSEC3ResourceRecord functions.