avahi: daemon infinite loop triggered by an empty UDP packet (CVE-2010-2244 fix regression)

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service infinite loop via an empty mDNS 1 IPv4 or 2 IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244...

Moderate: Red Hat Security Advisory: avahi security update

Updated avahi packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

avahi security update

0.6.16-10 - Fix for CVE-2011-1002 - Resolves: 684884...

Ubuntu Update for avahi vulnerability USN-1084-1

Ubuntu Update for Linux kernel vulnerabilities USN-1084-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10841.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for avahi vulnerability USN-1084-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Fedora 15 : avahi-0.6.29-1.fc15 (2011-3033)

Fixes CVE-2011-1002 among other smaller things Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

FreeBSD : avahi -- denial of service (8b986a05-4dbe-11e0-8b9a-02e0184b8d35)

Avahi developers reports : A vulnerability has been reported in Avahi, which can be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to an error when processing certain UDP packets, which can be exploited to trigger an infinite loop by e.g. sending a...

Ubuntu: Security Advisory (USN-1084-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2174-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2174-1 (avahi)

The remote host is missing an update to avahi announced via advisory DSA 2174-1. OpenVAS Vulnerability Test $Id: deb21741.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2174-1 avahi Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : avahi vulnerability (USN-1084-1)

It was discovered that Avahi incorrectly handled empty UDP packets. A remote attacker could send a specially crafted packet and cause Avahi to hang, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

USN-1084-1: avahi vulnerability

It was discovered that Avahi incorrectly handled empty UDP packets. A remote attacker could send a specially-crafted packet and cause Avahi to hang, resulting in a denial of service...

Debian DSA-2174-1 : avahi - denial of service

It was discovered that Avahi, an implementation of the zeroconf protocol, can be crashed remotely by a single UDP packet, which may result in a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Mandriva Update for avahi MDVSA-2011:037 (avahi)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for avahi MDVSA-2011:037 (avahi)

Check for the Version of avahi OpenVAS Vulnerability Test Mandriva Update for avahi MDVSA-2011:037 avahi Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] [DSA 2174-1] avahi security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2174-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 26, 2011 http://www.debian.org/security/faq -...

DSA-2174-1 avahi - denial of service

Bulletin has no description...

Mandriva Linux Security Advisory : avahi (MDVSA-2011:037)

A vulnerability has been found and corrected in avahi : avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service infinite loop via an empty 1 IPv4 or 2 IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix...

Avahi DNS server DoS

Crash on malformed DNS packet parsing...

[ MDVSA-2011:037 ] avahi

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:037 http://www.mandriva.com/security/ Package : avahi Date : February 24, 2011 Affected: 2009.0, 2010.0, 2010.1, Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in...

CVE-2011-1002

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service infinite loop via an empty mDNS 1 IPv4 or 2 IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244...