The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade avahi-qt3-develUpgrade avahi-compat-howlUpgrade avahi-compat-howl-develUpgrade avahi-glibUpgrade avahi-compat-libdns_sdUpgrade avahi-develUpgrade avahiUpgrade avahi-toolsUpgrade avahi-qt3Upgrade avahi-glib-develUpgrade avahi-compat-libdns_sd-devel | Dec 1, 2016 | Dec 16, 2008 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | Dec 17, 2008 |
| Gentoo Linux | — | Upgrade net-dns/avahi. | Oct 30, 2017 | Dec 16, 2008 |
| Oracle_linux | — | Upgrade avahi-qt3Upgrade avahi-toolsUpgrade avahi-qt3-develUpgrade avahi-compat-howl-develUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-libdns_sdUpgrade avahi-glibUpgrade avahiUpgrade avahi-compat-howlUpgrade avahi-devel | Oct 16, 2024 | Dec 17, 2008 |
| Suse | — | Upgrade avahi-utilsUpgrade avahi-utils-gtkUpgrade python313-avahiUpgrade libavahi-client3-x86Upgrade libavahi-develUpgrade libhowl0Upgrade libdns_sd-x86Upgrade libavahi-glib-develUpgrade libavahi-ui-gtk3-0Upgrade libavahi-gobject0Upgrade libavahi-qt6-1Upgrade avahi-autoipdUpgrade libdns_sdUpgrade libavahi-common3-x86Upgrade avahiUpgrade libavahi-glib1Upgrade libavahi-core7Upgrade libavahi-core5Upgrade python3-avahi-gtkUpgrade libavahi-qt6-develUpgrade libavahi-client3-32bitUpgrade libavahi-common3-32bitUpgrade avahi-compat-mDNSResponder-develUpgrade libavahi-client3Upgrade python-avahiUpgrade libdns_sd-32bitUpgrade libavahi-gobject-develUpgrade libavahi-libevent1Upgrade typelib-1_0-Avahi-0_6Upgrade libavahi-common3Upgrade avahi-langUpgrade avahi-compat-howl-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade avahi-daemon | Nov 8, 2024 | Dec 17, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub