Code injection

The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...

CVE-2009-0758

CVE-2009-0758 affects the avahi-daemon: the originates_from_local_legacy_unicast_socket function in avahi-core/server.c fails to account for the network byte order of a port when processing incoming multicast packets, allowing remote attackers to trigger a multicast packet storm and cause denial ...

CVE-2009-0758

The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...

CVE-2009-0758

The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...

Avahi avahi-core/server.c多播DNS拒绝服务漏洞

BUGTRAQ ID: 33946 Avahi是用于简化在本地网络中发现服务的工具。 Avahi的avahi-core/server.c文件中的 originatesfromlocallegacyunicastsocket例程在检查入站的多播报文时没有考虑.sinport的网络字节序列，avahi-daemon反射器在反射旧式单播mDNS通讯时会导致出现大量报文。反射器将初始的多播查询转发到其他接口，然后在同一接口接收回来（IPMULTICASTLOOP），但没有将刚刚转发的查询识别为旧式单播报文，因此就处理为独立的查询，并转发给所有的其他接口。进程如此反复，直到拒绝服务。 Avahi...

Fedora Update for avahi FEDORA-2007-018

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for avahi FEDORA-2007-019

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for avahi FEDORA-2007-018

Check for the Version of avahi OpenVAS Vulnerability Test Fedora Update for avahi FEDORA-2007-018 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for avahi FEDORA-2007-019

Check for the Version of avahi OpenVAS Vulnerability Test Fedora Update for avahi FEDORA-2007-019 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Mandrake Security Advisory MDVSA-2009:031 (avahi)

The remote host is missing an update to avahi announced via advisory MDVSA-2009:031. OpenVAS Vulnerability Test $Id: mdksa2009031.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:031 avahi Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:031 (avahi)

The remote host is missing an update to avahi announced via advisory MDVSA-2009:031. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

openSUSE 10 Security Update : avahi (avahi-5882)

Specially crafted mDNS packets could crash the Avahi daemon CVE-2008-5081. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update avahi-5882. The text description of this plugin is C SUSE LLC...

DTSA-189-1 avahi - denial of service

Bulletin has no description...

Gentoo Security Advisory GLSA 200901-11 (avahi)

The remote host is missing updates announced in advisory GLSA 200901-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CentOS Security Advisory CESA-2009:0013 (avahi)

The remote host is missing updates to avahi announced in advisory CESA-2009:0013. CESA-2009:0013 63246 2 $Id: ovcesa20090013.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0013 avahi Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Gentoo Security Advisory GLSA 200901-11 (avahi)

The remote host is missing updates announced in advisory GLSA 200901-11. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CentOS Security Advisory CESA-2009:0013 (avahi)

The remote host is missing updates to avahi announced in advisory CESA-2009:0013. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-onl...

GLSA-200901-11 : Avahi: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200901-11 Avahi: Denial of Service Hugo Dias reported a failed assertion in the originatesfromlocallegacyunicastsocket function in avahi-core/server.c when processing mDNS packets with a source port of 0. Impact : A remote attacke...

avahi security update

CentOS Errata and Security Advisory CESA-2009:0013 Updated avahi packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Avahi is an implementation of the DNS Service...

Avahi: Denial of service

Background Avahi is a system that facilitates service discovery on a local network. Description Hugo Dias reported a failed assertion in the originatesfromlocallegacyunicastsocket function in avahi-core/server.c when processing mDNS packets with a source port of 0. Impact A remote attacker could...