The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade avahi-compat-libdns_sd-develUpgrade avahi-qt3Upgrade avahi-compat-libdns_sdUpgrade avahi-develUpgrade avahiUpgrade avahi-glib-develUpgrade avahi-toolsUpgrade avahi-glibUpgrade avahi-compat-howl-develUpgrade avahi-qt3-develUpgrade avahi-compat-howl | Dec 1, 2016 | Dec 16, 2008 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | Dec 17, 2008 |
| Gentoo Linux | — | Upgrade net-dns/avahi. | Oct 30, 2017 | Dec 16, 2008 |
| Oracle_linux | — | Upgrade avahi-compat-libdns_sdUpgrade avahi-compat-libdns_sd-develUpgrade avahi-glibUpgrade avahi-compat-howlUpgrade avahi-develUpgrade avahiUpgrade avahi-glib-develUpgrade avahi-qt3Upgrade avahi-toolsUpgrade avahi-qt3-develUpgrade avahi-compat-howl-devel | Oct 16, 2024 | Dec 17, 2008 |
| Suse | — | Upgrade avahi-glibUpgrade avahi-compat-mdnsresponder-develUpgrade avahi-compat-howlUpgrade avahi-utils-gtkUpgrade libavahi-glib1-32bitUpgrade avahi-utilsUpgrade libavahi-core5Upgrade libavahi-gobject0Upgrade libavahi-glib-develUpgrade libavahi-develUpgrade libavahi-client3-64bitUpgrade avahi-compat-mDNSResponder-64bitUpgrade libavahi-common3-64bitUpgrade avahiUpgrade avahi-compat-mDNSResponderUpgrade libhowl0Upgrade libdns_sdUpgrade avahi-pythonUpgrade avahi-develUpgrade libavahi-glib1Upgrade libavahi-ui0Upgrade libavahi-client3Upgrade libdns_sd-32bitUpgrade libavahi-gobject-develUpgrade libavahi-client3-32bitUpgrade libdns_sd-64bitUpgrade libavahi-common3Upgrade avahi-glib-32bitUpgrade avahi-compat-mDNSResponder-32bitUpgrade avahi-qt4Upgrade libavahi-common3-32bitUpgrade avahi-qt3Upgrade avahi-compat-howl-develUpgrade avahi-32bitUpgrade libavahi-glib1-64bitUpgrade avahi-glib-64bitUpgrade avahi-64bitUpgrade python-avahi | Feb 17, 2015 | Dec 16, 2008 |
| Ubuntu | — | Upgrade avahi-daemon | Nov 8, 2024 | Dec 17, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub