openSUSE 10 Security Update : avahi (avahi-1399)

A local exploitable buffer overflow has been found in avahi. The impact is low since avahi is running in a chroot environment. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update avahi-1399. The...

Mandrake Linux Security Advisory : avahi (MDKSA-2007:185)

The Avahi daemon in 0.6.20 and previous allows attackers to cause a denial of service via empty TXT data over D-Bus, which triggers an assert error. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

Avahi DBUS DoS

Empty TXT record causes daemon to crash...

Design/Logic Flaw

The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service exit via empty TXT data over D-Bus, which triggers an assert error...

CVE-2007-3372

The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service exit via empty TXT data over D-Bus, which triggers an assert error...

CVE-2007-3372

The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service exit via empty TXT data over D-Bus, which triggers an assert error...

DEBIAN-CVE-2007-3372

The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service exit via empty TXT data over D-Bus, which triggers an assert error...

CVE-2007-3372

The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service exit via empty TXT data over D-Bus, which triggers an assert error...

CVE-2007-3372

The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service exit via empty TXT data over D-Bus, which triggers an assert error...

CVE-2007-3372

CVE-2007-3372 affects the Avahi daemon, with vulnerable releases prior to 0.6.20. An attacker can trigger a denial of service by sending empty TXT data over D-Bus, causing an assertion failure. A fix is available in Avahi 0.6.20 and later (updates referenced in the milestoned changeset). If apply...

CVE-2007-3372

The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service exit via empty TXT data over D-Bus, which triggers an assert error...

Mandrake Linux Security Advisory : avahi (MDKSA-2007:003)

The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself. Updated packages are patched to address this issue. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : avahi (MDKSA-2006:215)

Steve Grubb discovered that netlink messages were not being checked for their sender identity. This could lead to local users manipulating the Avahi service. Packages have been patched to correct this issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Fedora Core 5 : avahi-0.6.11-3.fc5 (2007-018)

avahi-0.6.11-3.fc5 should fix CVE-2006-6870 - the consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself. Note that Tenable Network Security has...

Fedora Core 6 : avahi-0.6.16-1.fc6 (2007-019)

This update shoul fix CVE-2006-6870 reported in 221440. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Core 6 : avahi-0.6.15-1.fc6 (2006-1340)

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi. Note that Tenable Network Security has extracted the preceding description block directly fr...

Fedora Core 5 : avahi-0.6.11-2.fc5 (2006-1339)

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi. avahi-0.6.11-2.fc5 has applied patch which should resolve this issue. Note that Tenable...

[SECURITY] Fedora Core 6 Update: avahi-0.6.16-1.fc6

Avahi is a system which facilitates service discovery on a local network -- this means that you can plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. This kind of technology is alread...

Avahi DNS response DoS

Malcrafted DNS response causes endless loop...

[ MDKSA-2007:003 ] - Updated avahi packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:003 http://www.mandriva.com/security/ Package : avahi Date : January 8, 2007 Affected: 2007.0 Problem Description: The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attacker...