[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

243238

 
 

909

 
 

192833

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-90724-6

Platform: rhel7,centos7Date: (C)2017-06-29   (M)2022-10-10



Check Avahi Responses' TTL Field To make Avahi ignore packets unless the TTL field is 255, edit '/etc/avahi/avahi-daemon.conf' and ensure the following line appears in the '[server]' section: 'check-response-ttl=yes'


Parameter:


Technical Mechanism:

This helps to ensure that only mDNS responses from the local network are processed, because the TTL field in a packet is decremented from its initial value of 255 whenever it is routed from one network to another. Although Aproperly-configured router or firewall should not allow mDNS packets into the local network at all, this option provides another check to ensure they are not permitted. Fix: No Remediation Info

CCSS Severity:CCSS Metrics:
CCSS Score : Attack Vector:
Exploit Score: Attack Complexity:
Impact Score: Privileges Required:
Severity: User Interaction:
Vector: Scope:
 Confidentiality:
 Integrity:
 Availability:
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:30414
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:31137


OVAL    2
oval:org.secpod.oval:def:30414
oval:org.secpod.oval:def:31137

© SecPod Technologies