The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade avahi-qt3Upgrade avahi-toolsUpgrade avahi-glibUpgrade avahi-develUpgrade avahiUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-howlUpgrade avahi-qt3-develUpgrade avahi-compat-howl-devel | Dec 1, 2016 | Dec 16, 2008 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | Dec 17, 2008 |
| Gentoo Linux | — | Upgrade net-dns/avahi. | Oct 30, 2017 | Dec 16, 2008 |
| Oracle_linux | — | Upgrade avahi-toolsUpgrade avahi-qt3Upgrade avahi-compat-howl-develUpgrade avahi-qt3-develUpgrade avahi-glibUpgrade avahi-compat-libdns_sd-develUpgrade avahi-develUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-howlUpgrade avahi | Oct 16, 2024 | Dec 17, 2008 |
| Suse | — | Upgrade python313-avahiUpgrade libdns_sd-x86Upgrade avahi-autoipdUpgrade avahi-utilsUpgrade avahiUpgrade avahi-utils-gtkUpgrade libavahi-gobject0Upgrade libavahi-develUpgrade libavahi-ui-gtk3-0Upgrade libavahi-glib-develUpgrade libavahi-qt6-1Upgrade libavahi-core7Upgrade libavahi-common3-x86Upgrade libhowl0Upgrade libavahi-client3-x86Upgrade libavahi-core5Upgrade libavahi-glib1Upgrade libdns_sdUpgrade avahi-compat-mDNSResponder-develUpgrade avahi-compat-howl-develUpgrade python3-avahi-gtkUpgrade libavahi-client3-32bitUpgrade typelib-1_0-Avahi-0_6Upgrade libavahi-qt6-develUpgrade libdns_sd-32bitUpgrade libavahi-gobject-develUpgrade libavahi-common3-32bitUpgrade libavahi-libevent1Upgrade libavahi-common3Upgrade python-avahiUpgrade libavahi-client3Upgrade avahi-lang | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade avahi-daemon | Nov 8, 2024 | Dec 17, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub