[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2020-1502 --- avahi

ID: oval:org.secpod.oval:def:1700426Date: (C)2020-11-05   (M)2023-12-20
Class: PATCHFamily: unix




avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809

Platform:
Amazon Linux 2
Product:
avahi
Reference:
ALAS2-2020-1502
CVE-2017-6519
CVE    1
CVE-2017-6519

© SecPod Technologies