The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade avahi-glib-develUpgrade avahiUpgrade avahi-qt3Upgrade avahi-glibUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-libdns_sd-develUpgrade avahi-toolsUpgrade avahi-develUpgrade avahi-qt3-develUpgrade avahi-compat-howl-develUpgrade avahi-compat-howl | Dec 1, 2016 | Dec 16, 2008 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | Dec 17, 2008 |
| Gentoo Linux | — | Upgrade net-dns/avahi. | Oct 30, 2017 | Dec 16, 2008 |
| Oracle_linux | — | Upgrade avahi-toolsUpgrade avahi-qt3-develUpgrade avahi-qt3Upgrade avahi-compat-howl-develUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-howlUpgrade avahi-glib-develUpgrade avahi-glibUpgrade avahi-develUpgrade avahiUpgrade avahi-compat-libdns_sd-devel | Oct 16, 2024 | Dec 17, 2008 |
| Suse | — | Upgrade libavahi-gobject0Upgrade libavahi-client3-x86Upgrade python313-avahiUpgrade avahi-utilsUpgrade libavahi-glib-develUpgrade libavahi-core5Upgrade avahi-autoipdUpgrade avahi-utils-gtkUpgrade libavahi-common3-x86Upgrade libavahi-glib1Upgrade avahiUpgrade libhowl0Upgrade libavahi-core7Upgrade libavahi-develUpgrade libdns_sd-x86Upgrade libdns_sdUpgrade libavahi-ui-gtk3-0Upgrade libavahi-qt6-1Upgrade avahi-compat-mDNSResponder-develUpgrade libavahi-client3Upgrade libavahi-client3-32bitUpgrade libavahi-qt6-develUpgrade libavahi-common3Upgrade typelib-1_0-Avahi-0_6Upgrade libavahi-gobject-develUpgrade libdns_sd-32bitUpgrade python-avahiUpgrade libavahi-libevent1Upgrade avahi-langUpgrade libavahi-common3-32bitUpgrade python3-avahi-gtkUpgrade avahi-compat-howl-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade avahi-daemon | Nov 8, 2024 | Dec 17, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub