The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum, a different vulnerability than CVE-2008-5081.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade avahi-qt3Upgrade avahi-develUpgrade avahi-compat-libdns_sdUpgrade avahi-toolsUpgrade avahi-qt3-develUpgrade avahi-compat-libdns_sd-develUpgrade avahiUpgrade avahi-compat-howlUpgrade avahi-compat-howl-develUpgrade avahi-glib-develUpgrade avahi-glib | Dec 1, 2016 | Jul 8, 2010 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | Jul 8, 2010 |
| Freebsd | — | Upgrade avahi-qt3Upgrade avahi-appUpgrade avahi-libdnsUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-qt4Upgrade avahi-gtkUpgrade avahi-sharp | Dec 10, 2025 | Mar 13, 2011 |
| Gentoo Linux | — | Upgrade net-dns/avahi. | Oct 30, 2017 | Jul 8, 2010 |
| Oracle_linux | — | Upgrade avahi-glib-develUpgrade avahi-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-glibUpgrade avahi-toolsUpgrade avahiUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-howl-develUpgrade avahi-compat-howlUpgrade avahi-qt3-develUpgrade avahi-qt3 | Oct 16, 2024 | Jul 7, 2010 |
| Suse | — | Upgrade libavahi-common3Upgrade python3-avahi-gtkUpgrade libavahi-core7Upgrade python-avahiUpgrade libavahi-common3-32bitUpgrade libavahi-client3-32bitUpgrade typelib-1_0-Avahi-0_6Upgrade avahi-compat-howl-develUpgrade libavahi-libevent1Upgrade libdns_sd-32bitUpgrade avahi-langUpgrade libavahi-qt6-1Upgrade libavahi-gobject-develUpgrade avahi-utilsUpgrade avahi-compat-mDNSResponder-develUpgrade libdns_sdUpgrade libhowl0Upgrade libavahi-gobject0Upgrade avahi-autoipdUpgrade libavahi-develUpgrade libavahi-glib-develUpgrade avahi-utils-gtkUpgrade python313-avahiUpgrade avahiUpgrade libavahi-ui-gtk3-0Upgrade libavahi-client3Upgrade libavahi-qt6-develUpgrade libavahi-glib1 | Aug 9, 2024 | Jan 27, 2011 |
| Ubuntu | — | Upgrade libavahi-core5Upgrade libavahi-core6 | Nov 8, 2024 | Jul 8, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub