USN-992-1: Avahi vulnerabilities

It was discovered that Avahi incorrectly handled certain mDNS query packets when the reflector feature is enabled, which is not the default configuration on Ubuntu. A remote attacker could send crafted mDNS queries and perform a denial of service on the server and on the network. This issue only...

Debian: Security Advisory (DSA-2086-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: avahi security update

Updated avahi packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

openSUSE Security Update : avahi (avahi-1832)

The avahi-daemon reflector could cause packet storms when reflecting legacy unicast mDNS traffic CVE-2009-0758. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update avahi-1832. The text description...

lexmark-config NSE Script

Retrieves configuration information from a Lexmark S300-S400 printer. The Lexmark S302 responds to the NTPRequest version probe with its configuration. The response decodes as mDNS, so the request was modified to resemble an mDNS request as close as possible. However, the port 9100/udp is listed ...

openSUSE Security Update : avahi (avahi-384)

Specially crafted mDNS packets could crash the Avahi daemon CVE-2008-5081. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update avahi-384. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : avahi (avahi-384)

Specially crafted mDNS packets could crash the Avahi daemon CVE-2008-5081. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update avahi-384. The text description of this plugin is C SUSE LLC...

Mandriva Linux Security Advisory : avahi (MDVSA-2009:076)

A security vulnerability has been identified and fixed in avahi which could allow remote attackers to cause a denial of service network bandwidth and CPU consumption via a crafted legacy unicast mDNS query packet CVE-2009-0758. The updated packages have been patched to prevent this. %NASLMINLEVEL...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : avahi vulnerabilities (USN-696-1)

Emanuele Aina discovered that Avahi did not properly validate its input when processing data over D-Bus. A local attacker could send an empty TXT message via D-Bus and cause a denial of service failed assertion. This issue only affected Ubuntu 6.06 LTS. CVE-2007-3372 Hugo Dias discovered that Ava...

GLSA-200904-10 : Avahi: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200904-10 Avahi: Denial of Service Rob Leslie reported that the originatesfromlocallegacyunicastsocket function in avahi-core/server.c does not account for the network byte order of a port number when processing incoming multicast...

Ubuntu Update for avahi vulnerabilities USN-696-1

Ubuntu Update for Linux kernel vulnerabilities USN-696-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6961.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for avahi vulnerabilities USN-696-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Mandrake Security Advisory MDVSA-2009:076 (avahi)

The remote host is missing an update to avahi announced via advisory MDVSA-2009:076. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Avahi multicast DNS server DoS

Resources exhaustions on mDNS packet parsing...

mDNS Service Detection (UDP)

UDP based detection of services supporting the Multicast DNS mDNS protocol. SPDX-FileCopyrightText: 2009 Christian Eric Edjenguele SPDX-FileCopyrightText: Reworked, improved and extended detection routine since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

CVE-2009-0758

The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...

CVE-2009-0758

The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...

CVE-2009-0758

The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...

CVE-2009-0758: Undefined Security Weakness

The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...

Mandrake Security Advisory MDVSA-2009:031 (avahi)

The remote host is missing an update to avahi announced via advisory MDVSA-2009:031. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

openSUSE 10 Security Update : avahi (avahi-5882)

Specially crafted mDNS packets could crash the Avahi daemon CVE-2008-5081. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update avahi-5882. The text description of this plugin is C SUSE LLC...