avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade avahi-qt3-develUpgrade avahi-compat-howl-develUpgrade avahi-glibUpgrade avahi-qt3Upgrade avahi-glib-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-howlUpgrade avahi-compat-libdns_sdUpgrade avahi-toolsUpgrade avahiUpgrade avahi-devel | Dec 1, 2016 | Feb 22, 2011 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | Feb 22, 2011 |
| Freebsd | — | Upgrade avahi-appUpgrade avahi-autoipdUpgrade avahi-libdnsUpgrade avahiUpgrade avahi-sharpUpgrade avahi-qt4Upgrade avahi-qt3Upgrade avahi-gtk | Dec 10, 2025 | Mar 13, 2011 |
| Gentoo Linux | — | Upgrade net-dns/avahi. | Oct 30, 2017 | Feb 22, 2011 |
| Oracle_linux | — | Upgrade avahi-develUpgrade avahi-dnsconfdUpgrade avahi-uiUpgrade avahi-qt4-develUpgrade avahi-autoipdUpgrade avahi-qt3-develUpgrade avahi-compat-libdns_sdUpgrade avahi-ui-toolsUpgrade avahi-compat-libdns_sd-develUpgrade avahi-gobjectUpgrade avahiUpgrade avahi-compat-howlUpgrade avahi-compat-howl-develUpgrade avahi-glibUpgrade avahi-qt4Upgrade avahi-ui-develUpgrade avahi-libsUpgrade avahi-toolsUpgrade avahi-qt3Upgrade avahi-glib-develUpgrade avahi-gobject-devel | Oct 16, 2024 | Feb 22, 2011 |
| Suse | — | Upgrade avahi-utilsUpgrade avahiUpgrade libavahi-common3Upgrade libavahi-glib1Upgrade libavahi-glib-develUpgrade libavahi-ui-gtk3-0Upgrade libavahi-develUpgrade libavahi-gobject-develUpgrade libavahi-gobject0Upgrade python3-avahi-gtkUpgrade libavahi-client3Upgrade avahi-langUpgrade avahi-compat-howl-develUpgrade libavahi-core7Upgrade libavahi-libevent1Upgrade python-avahiUpgrade typelib-1_0-Avahi-0_6Upgrade libdns_sd-32bitUpgrade avahi-utils-gtkUpgrade libhowl0Upgrade libdns_sdUpgrade libavahi-common3-32bitUpgrade avahi-autoipdUpgrade avahi-compat-mDNSResponder-develUpgrade python313-avahiUpgrade libavahi-qt6-1Upgrade libavahi-qt6-develUpgrade libavahi-client3-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libavahi-core6Upgrade libavahi-core7Upgrade libavahi-core5 | Nov 8, 2024 | Feb 22, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub