Avahi multicast DNS server DoS
Published:		23.12.2008
Source:		BUGTRAQ
SecurityVulns ID:		9540
Type:		remote
Level:		5/10
Description:		assert() on UDP packet with SRC port 0.

Affected:		AVAHI : Avahi 0.6
CVE:		CVE-2008-5081 (The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.)

Original document

Florian Weimer, [SECURITY] [DSA 1690-1] New avahi packages fix denial of service (23.12.2008)

Discuss:

Read or add your comments to this news (0 comments)