The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade avahi-compat-howlUpgrade avahi-qt3-develUpgrade avahi-compat-howl-develUpgrade avahi-develUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-libdns_sd-develUpgrade avahi-glibUpgrade avahiUpgrade avahi-toolsUpgrade avahi-qt3 | Dec 1, 2016 | Dec 16, 2008 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | Dec 17, 2008 |
| Gentoo Linux | — | Upgrade net-dns/avahi. | Oct 30, 2017 | Dec 16, 2008 |
| Oracle_linux | — | Upgrade avahi-develUpgrade avahi-compat-libdns_sdUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sd-develUpgrade avahiUpgrade avahi-glibUpgrade avahi-compat-howlUpgrade avahi-compat-howl-develUpgrade avahi-qt3-develUpgrade avahi-toolsUpgrade avahi-qt3 | Oct 16, 2024 | Dec 17, 2008 |
| Suse | — | Upgrade avahiUpgrade libdns_sdUpgrade libhowl0Upgrade libavahi-qt6-1Upgrade libavahi-ui-gtk3-0Upgrade libavahi-develUpgrade libavahi-glib-develUpgrade libavahi-core7Upgrade libavahi-core5Upgrade avahi-utils-gtkUpgrade libdns_sd-x86Upgrade avahi-utilsUpgrade python313-avahiUpgrade libavahi-gobject0Upgrade libavahi-glib1Upgrade avahi-autoipdUpgrade libavahi-common3-x86Upgrade libavahi-client3-x86Upgrade typelib-1_0-Avahi-0_6Upgrade libavahi-gobject-develUpgrade python-avahiUpgrade avahi-compat-mDNSResponder-develUpgrade libavahi-client3-32bitUpgrade libavahi-client3Upgrade libavahi-common3-32bitUpgrade avahi-compat-howl-develUpgrade avahi-langUpgrade python3-avahi-gtkUpgrade libdns_sd-32bitUpgrade libavahi-qt6-develUpgrade libavahi-common3Upgrade libavahi-libevent1 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade avahi-daemon | Nov 8, 2024 | Dec 17, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub