2298 matches found
Code injection
The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...
CVE-2009-0758
The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...
CVE-2009-0758
The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...
Avahi avahi-core/server.c多播DNS拒绝服务漏洞
BUGTRAQ ID: 33946 Avahi是用于简化在本地网络中发现服务的工具。 Avahi的avahi-core/server.c文件中的 originatesfromlocallegacyunicastsocket例程在检查入站的多播报文时没有考虑.sinport的网络字节序列，avahi-daemon反射器在反射旧式单播mDNS通讯时会导致出现大量报文。反射器将初始的多播查询转发到其他接口，然后在同一接口接收回来（IPMULTICASTLOOP），但没有将刚刚转发的查询识别为旧式单播报文，因此就处理为独立的查询，并转发给所有的其他接口。进程如此反复，直到拒绝服务。 Avahi...
Scan for UPnP hosts (multicast)
This machine answered to a multicast UPnP NOTIFY packet by trying to fetch the XML description that Nessus advertised. TRUSTED...
Moderate: Red Hat Security Advisory: avahi security update
Updated avahi packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for...
avahi: avahi-daemon DoS (application abort) via packet with source port 0
The originatesfromlocallegacyunicastsocket function avahi-core/server.c in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service crash via a crafted mDNS packet with a source port of 0, which triggers an assertion failure...
Avahi Denial of Service Vulnerability
This host is installed with Avahi and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodavahidosvuln.nasl 4917 2017-01-02 14:43:20Z cfi $ Avahi Denial of Service Vulnerability Authors: Sujit Ghosal Copyright c 2008 SecPod, http://www.secpod.com This program is fre...
Avahi Denial of Service Vulnerability
Avahi is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1690-1 (avahi)
The remote host is missing an update to avahi announced via advisory DSA 1690-1. OpenVAS Vulnerability Test $Id: deb16901.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1690-1 avahi Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
[SECURITY] [DSA 1690-1] New avahi packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1690-1 [email protected] http://www.debian.org/security/ Florian Weimer December 22, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1690-1] New avahi packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1690-1 [email protected] http://www.debian.org/security/ Florian Weimer December 22, 2008 http://www.debian.org/security/faq -...
DSA-1690-1 avahi - denial of service
Bulletin has no description...
DEBIAN-CVE-2008-5081
The originatesfromlocallegacyunicastsocket function avahi-core/server.c in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service crash via a crafted mDNS packet with a source port of 0, which triggers an assertion failure...
DEBIAN-CVE-2008-5141
flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar. temporary file...
Cisco IOS, Cisco 10000, uBR10012, uBR7200 and Cisco UCM multiple security vulnerabilities
DoS with L2TP, MPLS, IPS, SIP, SSL vulnerabilities, information leaks, multiple multicast security vulnerabilities, NAT SCP, IOS Software firewall application inspection security vulnerabilities...
Cisco Security Advisory: Multiple Multicast Vulnerabilities in Cisco IOS Software
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Multicast Vulnerabilities in Cisco IOS Software Advisory ID: cisco-sa-20080924-multicast http://www.cisco.com/warp/public/707/cisco-sa-20080924-multicast.shtml Revision 1.0 For Public Release 2008 September 24 1600 UT...
Code injection
Cisco IOS 12.0 through 12.4 on Gigabit Switch Router GSR devices aka 12000 Series routers allows remote attackers to cause a denial of service device crash via a malformed Protocol Independent Multicast PIM packet...
CVE-2008-3809
Cisco IOS 12.0 through 12.4 on Gigabit Switch Router GSR devices aka 12000 Series routers allows remote attackers to cause a denial of service device crash via a malformed Protocol Independent Multicast PIM packet...