CVE-2010-2244

The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service assertion failure and daemon exit via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum, a different vulnerability...

CVE-2010-2244

The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service assertion failure and daemon exit via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum, a different vulnerability...

DEBIAN-CVE-2010-2244

The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service assertion failure and daemon exit via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum, a different vulnerability...

Design/Logic Flaw

The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service assertion failure and daemon exit via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum, a different vulnerability...

Avahi avahi-core/socket.c文件畸形DNS报文拒绝服务漏洞

BUGTRAQ ID: 41075 CVE ID: CVE-2010-2244 Avahi是用于简化在本地网络中发现服务的工具。 Avahi的avahi-core/socket.c文件中的avahirecvdnspacketipv4和 avahirecvdnspacketipv6函数没有正确地处理畸形DNS报文，远程攻击者可以通过发送一个带有错误校验和的DNS报文之后立即跟随一个带有正确校验和的DNS报文触发assertion错误，导致服务终止。 Avahi 0.6.26 厂商补丁： Avahi ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2010-2244

The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service assertion failure and daemon exit via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum, a different vulnerability...

CVE-2010-2244

CVE-2010-2244 is an Avahi DoS in avahi-daemon (avahi-core/socket.c, Avahi 0.6.16 and 0.6.25) triggered by processing a malformed DNS packet and a following valid checksum packet. Connected sources confirm this vulnerability and that multiple distros released fixes (e.g., Debian DSA-2086-1; CentOS...

Fedora 13 : avahi-0.6.25-7.fc13 (2010-10581)

Fix for CVE-2010-2244. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 12 : avahi-0.6.25-7.fc12 (2010-10584)

Fix for CVE-2010-2244. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] Fedora 13 Update: avahi-0.6.25-7.fc13

Avahi is a system which facilitates service discovery on a local network -- this means that you can plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. This kind of technology is alread...

[SECURITY] Fedora 12 Update: avahi-0.6.25-7.fc12

Avahi is a system which facilitates service discovery on a local network -- this means that you can plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. This kind of technology is alread...

Avahi Source Port 0 DoS

Avahi-daemon versions prior to 0.6.24 can be DoS'd with an mDNS packet with a source port of 0. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Avahi Source Port 0 DoS', 'Description' = %q...

openSUSE Security Update : avahi (avahi-1832)

The avahi-daemon reflector could cause packet storms when reflecting legacy unicast mDNS traffic CVE-2009-0758. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update avahi-1832. The text description...

SuSE 11 Security Update : avahi (SAT Patch Number 1827)

The avahi-daemon reflector could cause packet storms when reflecting legacy unicast mDNS traffic CVE-2009-0758. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

openSUSE Security Update : avahi (avahi-1832)

The avahi-daemon reflector could cause packet storms when reflecting legacy unicast mDNS traffic CVE-2009-0758. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update avahi-1832. The text description...

CentOS 5 : avahi (CESA-2009:0013)

Updated avahi packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for...

openSUSE Security Update : avahi (avahi-384)

Specially crafted mDNS packets could crash the Avahi daemon CVE-2008-5081. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update avahi-384. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : avahi (avahi-384)

Specially crafted mDNS packets could crash the Avahi daemon CVE-2008-5081. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update avahi-384. The text description of this plugin is C SUSE LLC...

Mandriva Linux Security Advisory : avahi (MDVSA-2009:076)

A security vulnerability has been identified and fixed in avahi which could allow remote attackers to cause a denial of service network bandwidth and CPU consumption via a crafted legacy unicast mDNS query packet CVE-2009-0758. The updated packages have been patched to prevent this. %NASLMINLEVEL...

Mandriva Linux Security Advisory : avahi (MDVSA-2009:031)

A vulnerability has been discovered in Avahi before 0.6.24, which allows remote attackers to cause a denial of service crash via a crafted mDNS packet with a source port of 0 CVE-2008-5081. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...