The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service (network bandwidth and CPU consumption) via a crafted legacy unicast mDNS query packet that triggers a multicast packet storm.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade avahi-toolsUpgrade avahi-qt3Upgrade avahi-glib-develUpgrade avahi-glibUpgrade avahi-compat-howlUpgrade avahi-compat-howl-develUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-libdns_sd-develUpgrade avahiUpgrade avahi-develUpgrade avahi-qt3-devel | Dec 1, 2016 | Mar 3, 2009 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | Mar 3, 2009 |
| Gentoo Linux | — | Upgrade net-dns/avahi. | Oct 30, 2017 | Mar 3, 2009 |
| Oracle_linux | — | Upgrade avahi-qt3-develUpgrade avahi-compat-howlUpgrade avahi-qt3Upgrade avahi-develUpgrade avahi-toolsUpgrade avahi-compat-howl-develUpgrade avahi-compat-libdns_sd-develUpgrade avahiUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sdUpgrade avahi-glib | Oct 16, 2024 | Mar 3, 2009 |
| Suse | — | Upgrade libavahi-client3Upgrade python3-avahi-gtkUpgrade avahi-utilsUpgrade libavahi-gobject-develUpgrade python-avahiUpgrade libdns_sd-32bitUpgrade libavahi-gobject0Upgrade avahi-langUpgrade libavahi-ui-gtk3-0Upgrade libavahi-qt6-develUpgrade avahiUpgrade libdns_sd-x86Upgrade avahi-compat-mDNSResponder-develUpgrade python313-avahiUpgrade avahi-compat-howl-develUpgrade libavahi-glib1Upgrade libavahi-common3Upgrade libavahi-common3-32bitUpgrade libavahi-common3-x86Upgrade libavahi-libevent1Upgrade libavahi-develUpgrade libavahi-qt6-1Upgrade avahi-utils-gtkUpgrade typelib-1_0-Avahi-0_6Upgrade libavahi-client3-x86Upgrade avahi-autoipdUpgrade libavahi-client3-32bitUpgrade libavahi-core5Upgrade libavahi-glib-develUpgrade libhowl0Upgrade libavahi-core7Upgrade libdns_sd | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libavahi-core5Upgrade libavahi-core6 | Nov 8, 2024 | Mar 3, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub