avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade avahi-compat-libdns_sd-develUpgrade avahi-glibUpgrade avahi-toolsUpgrade avahi-compat-libdns_sdUpgrade avahi-glib-develUpgrade avahi-compat-howlUpgrade avahiUpgrade avahi-qt3Upgrade avahi-develUpgrade avahi-compat-howl-develUpgrade avahi-qt3-devel | Dec 1, 2016 | Feb 22, 2011 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | Feb 22, 2011 |
| Freebsd | — | Upgrade avahi-libdnsUpgrade avahi-qt3Upgrade avahi-sharpUpgrade avahiUpgrade avahi-gtkUpgrade avahi-qt4Upgrade avahi-appUpgrade avahi-autoipd | Dec 10, 2025 | Mar 13, 2011 |
| Gentoo Linux | — | Upgrade net-dns/avahi. | Oct 30, 2017 | Feb 22, 2011 |
| Oracle_linux | — | Upgrade avahi-qt3-develUpgrade avahi-autoipdUpgrade avahi-compat-libdns_sd-develUpgrade avahi-qt4-develUpgrade avahi-uiUpgrade avahi-ui-toolsUpgrade avahi-gobjectUpgrade avahi-compat-libdns_sdUpgrade avahi-develUpgrade avahi-dnsconfdUpgrade avahi-glib-develUpgrade avahi-ui-develUpgrade avahi-toolsUpgrade avahi-gobject-develUpgrade avahi-libsUpgrade avahi-compat-howlUpgrade avahi-qt3Upgrade avahi-qt4Upgrade avahi-compat-howl-develUpgrade avahi-glibUpgrade avahi | Oct 16, 2024 | Feb 22, 2011 |
| Suse | — | Upgrade avahi-compat-howl-develUpgrade libavahi-libevent1Upgrade libavahi-common3Upgrade libavahi-glib-develUpgrade libavahi-develUpgrade avahiUpgrade libavahi-client3Upgrade avahi-langUpgrade libavahi-core7Upgrade libavahi-gobject0Upgrade python-avahiUpgrade avahi-utilsUpgrade python3-avahi-gtkUpgrade libavahi-glib1Upgrade libavahi-gobject-develUpgrade libavahi-ui-gtk3-0Upgrade typelib-1_0-Avahi-0_6Upgrade libavahi-common3-32bitUpgrade avahi-compat-mDNSResponder-develUpgrade python313-avahiUpgrade libavahi-qt6-1Upgrade libhowl0Upgrade avahi-utils-gtkUpgrade avahi-autoipdUpgrade libavahi-qt6-develUpgrade libdns_sdUpgrade libdns_sd-32bitUpgrade libavahi-client3-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libavahi-core6Upgrade libavahi-core7Upgrade libavahi-core5 | Nov 8, 2024 | Feb 22, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub