Lucene search
PRIOn knowledge basePRION:CVE-2017-6519HistoryMay 01, 2017 - 1:59 a.m.
Design/Logic Flaw
2017-05-0101:59:00
PRIOn knowledge base
www.prio-n.com
4
avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.
| CPE | Name | Operator | Version |
|---|---|---|---|
| avahi | le | 0.6.32 | |
| avahi | eq | 0.7 | |
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 14.04 | |
| ubuntu_linux | eq | 12.04 | |
| ubuntu_linux | eq | 18.04 | |
| ubuntu_linux | eq | 18.10 |
References
bugzilla.redhat.com/show_bug.cgi?id=1426712
github.com/lathiat/avahi/issues/203
github.com/lathiat/avahi/issues/203
lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E
usn.ubuntu.com/3876-1/
usn.ubuntu.com/3876-2/
www.secfu.net/advisories
Related
nvd
nvd
nessus
nessus
EulerOS Virtualization 3.0.2.2 : avahi (EulerOS-SA-2020-1450)
2020-04-16 00:00:00
Amazon Linux 2 : avahi (ALAS-2020-1502)
2020-10-27 00:00:00
Oracle Linux 7 : avahi (ELSA-2020-1176)
2023-09-07 00:00:00
cve
cve
cvelist
cvelist
CVE-2017-6519
2017-05-01 01:00:00
CVE-2015-2809
2015-04-01 01:00:00
osv
osv
CVE-2017-6519
2017-05-01 01:59:00
CVE-2018-1000845
2018-12-20 15:29:02
alpinelinux
alpinelinux
CVE-2017-6519
2017-05-01 01:59:00
CVE-2018-1000845
2018-12-20 15:29:02
openvas
openvas
Huawei EulerOS: Security Advisory for avahi (EulerOS-SA-2020-1228)
2020-03-13 00:00:00
Huawei EulerOS: Security Advisory for avahi (EulerOS-SA-2020-1450)
2020-04-16 00:00:00
Huawei EulerOS: Security Advisory for avahi (EulerOS-SA-2020-2004)
2020-09-29 00:00:00
debiancve
debiancve
CVE-2017-6519
2017-05-01 01:59:00
amazon
amazon
Low: avahi
2020-10-22 17:19:00
ubuntucve
ubuntucve
CVE-2017-6519
2017-04-30 00:00:00
oraclelinux
oraclelinux
avahi security update
2020-04-06 00:00:00
mageia
mageia
Updated avahi packages fix security vulnerability
2019-02-14 11:38:16
redhat
redhat
(RHSA-2020:1176) Low: avahi security update
2020-03-31 09:28:31
prion
prion
Design/Logic Flaw
2015-04-01 02:00:00
centos
centos
avahi security update
2020-04-08 17:44:20
veracode
veracode
Denial Of Service (DoS)
2019-02-01 01:26:03
ibm
ibm
cbl_mariner
cbl_mariner
CVE-2017-6519 affecting package avahi for versions less than 0.8-1
2022-04-26 19:39:28
ubuntu
ubuntu
Avahi vulnerabilities
2019-01-31 00:00:00
Avahi vulnerabilities
2019-01-31 00:00:00
redhatcve
redhatcve
CVE-2018-1000845
2018-12-21 20:50:07