[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247768

 
 

909

 
 

194555

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2011:0436-01 -- Redhat avahi

ID: oval:org.secpod.oval:def:500068Date: (C)2012-01-31   (M)2023-12-26
Class: PATCHFamily: unix




Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print to, and find shared files on other computers. A flaw was found in the way the Avahi daemon processed Multicast DNS packets with an empty payload. An attacker on the local network could use this flaw to cause avahi-daemon on a target system to enter an infinite loop via an empty mDNS UDP packet. All users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, avahi-daemon will be restarted automatically.

Platform:
Red Hat Enterprise Linux 5
Product:
avahi
Reference:
RHSA-2011:0436-01
CVE-2011-1002
CVE-2010-2244
CVE    2
CVE-2011-1002
CVE-2010-2244
CPE    7
cpe:/a:avahi:avahi
cpe:/a:avahi:avahi:0.5
cpe:/o:redhat:enterprise_linux:5
cpe:/a:avahi:avahi:0.4
...

© SecPod Technologies