The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade avahi-develUpgrade avahi-qt3Upgrade avahi-glibUpgrade avahi-compat-libdns_sd-develUpgrade avahi-glib-develUpgrade avahiUpgrade avahi-compat-libdns_sdUpgrade avahi-toolsUpgrade avahi-compat-howl-develUpgrade avahi-compat-howlUpgrade avahi-qt3-devel | Dec 1, 2016 | Dec 16, 2008 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | Dec 17, 2008 |
| Gentoo Linux | — | Upgrade net-dns/avahi. | Oct 30, 2017 | Dec 16, 2008 |
| Oracle_linux | — | Upgrade avahi-glibUpgrade avahiUpgrade avahi-develUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-howlUpgrade avahi-qt3-develUpgrade avahi-compat-howl-develUpgrade avahi-toolsUpgrade avahi-qt3 | Oct 16, 2024 | Dec 17, 2008 |
| Suse | — | Upgrade libavahi-glib-develUpgrade libavahi-ui-gtk3-0Upgrade avahiUpgrade libavahi-common3-x86Upgrade libavahi-develUpgrade python313-avahiUpgrade avahi-utilsUpgrade libhowl0Upgrade libavahi-glib1Upgrade libavahi-gobject0Upgrade avahi-utils-gtkUpgrade libavahi-client3-x86Upgrade libdns_sdUpgrade libdns_sd-x86Upgrade libavahi-qt6-1Upgrade libavahi-core7Upgrade libavahi-core5Upgrade avahi-autoipdUpgrade libavahi-libevent1Upgrade libavahi-gobject-develUpgrade libdns_sd-32bitUpgrade libavahi-qt6-develUpgrade python-avahiUpgrade libavahi-client3Upgrade libavahi-common3-32bitUpgrade typelib-1_0-Avahi-0_6Upgrade libavahi-client3-32bitUpgrade libavahi-common3Upgrade avahi-compat-mDNSResponder-develUpgrade python3-avahi-gtkUpgrade avahi-compat-howl-develUpgrade avahi-lang | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade avahi-daemon | Nov 8, 2024 | Dec 17, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub