avahi -- denial of service

2011-02-26T00:00:00
ID DSA-2174
Type debian
Reporter Debian
Modified 2011-02-26T00:00:00

Description

It was discovered that Avahi, an implementation of the zeroconf protocol, can be crashed remotely by a single UDP packet, which may result in a denial of service.

For the oldstable distribution (lenny), this problem has been fixed in version 0.6.23-3lenny3.

For the stable distribution (squeeze), this problem has been fixed in version 0.6.27-2+squeeze1.

For the testing (wheezy) and unstable distribution (sid), this problem has been fixed in version 0.6.28-4.

We recommend that you upgrade your avahi packages.