[ MDKSA-2007:003 ] - Updated avahi packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:003 http://www.mandriva.com/security/ Package : avahi Date : January 8, 2007 Affected: 2007.0 Problem Description: The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attacker...

Avahi DNS response DoS

Malcrafted DNS response causes endless loop...

Avahi压缩DNS拒绝服务漏洞

Avahi是一款用于在本地网络搜寻可应用服务的应用程序。 Avahi处理压缩DNS存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 提交恶意的压缩的DNS包信息，可导致Avahi崩溃，目前没有详细漏洞细节提供。 Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 6.10 sparc Ubuntu Ubuntu Linux 6.10...

[SECURITY] Fedora Core 5 Update: avahi-0.6.11-3.fc5

Avahi is a system which facilitates service discovery on a local network -- this means that you can plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. This kind of technology is alread...

USN-402-1: Avahi vulnerability

A flaw was discovered in Avahi's handling of compressed DNS packets. If a specially crafted reply were received over the network, the Avahi daemon would go into an infinite loop, causing a denial of service...

CVE-2006-6870

The CVE-2006-6870 vulnerability affects Avahi prior to 0.6.16, where the consume_labels function in avahi-core/dns.c can be triggered by a crafted compressed DNS response containing a label that points to itself. This leads to a denial of service via an infinite loop. Evidence across multiple adv...

CVE-2006-6870

The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself...

CVE-2006-6870

The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself...

CVE-2006-6870

The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself...

CVE-2006-6870

The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself...

DEBIAN-CVE-2006-6870

The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself...

CVE-2006-6870

The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself...

USN-380-2: avahi regression

USN-380-1 fixed a vulnerability in Avahi. However, if used with Network manager, that version occasionally failed to resolve .local DNS names until Avahi got restarted. This update fixes the problem. We apologize for the inconvenience...

GLSA-200611-13 : Avahi: 'netlink' message vulnerability

The remote host is affected by the vulnerability described in GLSA-200611-13 Avahi: 'netlink' message vulnerability Avahi does not check that the netlink messages come from the kernel instead of a user-space process. Impact : A local attacker could exploit this vulnerability by crafting malicious...

Avahi: "netlink" message vulnerability

Background Avahi is a system that facilitates service discovery on a local network. Description Avahi does not check that the netlink messages come from the kernel instead of a user-space process. Impact A local attacker could exploit this vulnerability by crafting malicious netlink messages and...

CVE-2006-5461

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi...

CVE-2006-5461

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi...

CVE-2006-5461

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi...

DEBIAN-CVE-2006-5461

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi...

CVE-2006-5461

Avahi