avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade avahi-compat-libdns_sdUpgrade avahi-toolsUpgrade avahiUpgrade avahi-compat-howlUpgrade avahi-qt3Upgrade avahi-glibUpgrade avahi-compat-libdns_sd-develUpgrade avahi-glib-develUpgrade avahi-develUpgrade avahi-qt3-develUpgrade avahi-compat-howl-devel | Dec 1, 2016 | Feb 22, 2011 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | Feb 22, 2011 |
| Freebsd | — | Upgrade avahi-autoipdUpgrade avahi-appUpgrade avahi-libdnsUpgrade avahi-qt4Upgrade avahi-gtkUpgrade avahi-qt3Upgrade avahi-sharpUpgrade avahi | Dec 10, 2025 | Mar 13, 2011 |
| Gentoo Linux | — | Upgrade net-dns/avahi. | Oct 30, 2017 | Feb 22, 2011 |
| Oracle_linux | — | Upgrade avahi-compat-libdns_sdUpgrade avahi-autoipdUpgrade avahi-qt3-develUpgrade avahi-ui-toolsUpgrade avahi-gobjectUpgrade avahi-dnsconfdUpgrade avahi-qt4-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-develUpgrade avahi-uiUpgrade avahi-gobject-develUpgrade avahi-compat-howlUpgrade avahi-ui-develUpgrade avahi-libsUpgrade avahi-toolsUpgrade avahiUpgrade avahi-qt3Upgrade avahi-glib-develUpgrade avahi-glibUpgrade avahi-compat-howl-develUpgrade avahi-qt4 | Oct 16, 2024 | Feb 22, 2011 |
| Suse | — | Upgrade libavahi-gobject-develUpgrade typelib-1_0-Avahi-0_6Upgrade libavahi-ui-gtk3-0Upgrade libavahi-common3Upgrade avahi-compat-howl-develUpgrade libavahi-glib1Upgrade libavahi-gobject0Upgrade avahi-langUpgrade libavahi-develUpgrade libavahi-glib-develUpgrade python-avahiUpgrade avahi-utilsUpgrade python3-avahi-gtkUpgrade libavahi-core7Upgrade libavahi-client3Upgrade libavahi-libevent1Upgrade avahiUpgrade libdns_sdUpgrade libavahi-qt6-1Upgrade libavahi-common3-32bitUpgrade libavahi-client3-32bitUpgrade libdns_sd-32bitUpgrade avahi-compat-mDNSResponder-develUpgrade avahi-autoipdUpgrade libavahi-qt6-develUpgrade avahi-utils-gtkUpgrade python313-avahiUpgrade libhowl0 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libavahi-core7Upgrade libavahi-core6Upgrade libavahi-core5 | Nov 8, 2024 | Feb 22, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub