https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-9748.htmlhttps://patchthecve.com/cve/CVE-2019-9748.htmlWed, 17 Jun 2026 02:44:16 +0000CRITICAL 9.1: In tinysvcmdns through 2018-01-16, an mDNS server processing a crafted packet can perform arbitrary data read operations up to 16383 bytes from the start of the buffer. This can lead to a segmentation fault in uncompress_nlabel in mdns.c and a crash of the server (depending on the memory protection https://patchthecve.com/cve/CVE-2019-9747.htmlhttps://patchthecve.com/cve/CVE-2019-9747.htmlWed, 17 Jun 2026 02:44:16 +0000HIGH 7.5: In tinysvcmdns through 2018-01-16, a maliciously crafted mDNS (Multicast DNS) packet triggers an infinite loop while parsing an mDNS query. When mDNS compressed labels point to each other, the function uncompress_nlabel goes into an infinite loop trying to analyze the packet with an mDNS query. As ahttps://patchthecve.com/cve/CVE-2017-12087.htmlhttps://patchthecve.com/cve/CVE-2017-12087.htmlWed, 17 Jun 2026 01:02:39 +0000CRITICAL 10.0: An exploitable heap overflow vulnerability exists in the tinysvcmdns library version 2016-07-18. A specially crafted packet can make the library overwrite an arbitrary amount of data on the heap with attacker controlled values. An attacker needs send a dns packet to trigger this vulnerability.https://patchthecve.com/cve/CVE-2017-12130.htmlhttps://patchthecve.com/cve/CVE-2017-12130.htmlWed, 17 Jun 2026 01:02:44 +0000HIGH 7.5: An exploitable NULL pointer dereference vulnerability exists in the tinysvcmdns library version 2017-11-05. A specially crafted packet can make the library dereference a NULL pointer leading to a server crash and denial of service. An attacker needs to send a DNS query to trigger this vulnerability.