[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2011-1002Date: (C)2011-02-22   (M)2023-12-28


avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL
  
Reference:
SECUNIA-43361
SECUNIA-43465
SECUNIA-43605
SECUNIA-43673
SECUNIA-44131
BID-46446
OSVDB-70948
ADV-2011-0448
ADV-2011-0499
ADV-2011-0511
ADV-2011-0565
ADV-2011-0601
ADV-2011-0670
ADV-2011-0969
DSA-2174
FEDORA-2011-3033
MDVSA-2011:037
MDVSA-2011:040
RHSA-2011:0436
RHSA-2011:0779
SUSE-SR:2011:005
USN-1084-1
http://openwall.com/lists/oss-security/2011/02/18/1
http://openwall.com/lists/oss-security/2011/02/18/4
http://www.openwall.com/lists/oss-security/2011/02/22/9
avahi-udp-dos(65524)
avahi-udp-packet-dos(65525)
http://avahi.org/ticket/325
http://git.0pointer.de/?p=avahi.git%3Ba=commit%3Bh=46109dfec75534fe270c0ab902576f685d5ab3a6
http://xorl.wordpress.com/2011/02/20/cve-2011-1002-avahi-daemon-remote-denial-of-service/
https://bugzilla.redhat.com/show_bug.cgi?id=667187

CWE    1
CWE-835
OVAL    10
oval:org.secpod.oval:def:201584
oval:org.secpod.oval:def:500068
oval:org.secpod.oval:def:1504053
oval:org.secpod.oval:def:201533
...

© SecPod Technologies