Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

avahi-daemon vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-0758
The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote malicious users to cause a denial of service (networ...
Avahi Avahi-daemon 0.6.23
NA
CVE-2010-2244
The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote malicious users to cause a denial of service (assertion failure and daemon exit) via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum, a...
Avahi Avahi 0.6.25Avahi Avahi 0.6.16
NA
CVE-2007-3372
The Avahi daemon in Avahi prior to 0.6.20 allows malicious users to cause a denial of service (exit) via empty TXT data over D-Bus, which triggers an assert error.
Avahi Avahi
NA
CVE-2011-1002
avahi-core/socket.c in avahi-daemon in Avahi prior to 0.6.29 allows remote malicious users to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.
Avahi Avahi 0.6.25Avahi Avahi 0.6.5Avahi Avahi 0.6.20Avahi Avahi 0.6.19Avahi Avahi 0.5.2Avahi Avahi 0.6.1Avahi Avahi 0.6.13Avahi Avahi 0.6.15Avahi Avahi 0.6.7Avahi Avahi 0.6.17Avahi Avahi 0.6.16Avahi Avahi 0.3Avahi AvahiAvahi Avahi 0.6.24Avahi Avahi 0.6.23Avahi Avahi 0.6.9Avahi Avahi 0.2Avahi Avahi 0.1Avahi Avahi 0.6.14Avahi Avahi 0.6.10Avahi Avahi 0.6.27Avahi Avahi 0.6.6
7.8
CVSSv3
CVE-2021-26720
avahi-daemon-check-dns.sh in the Debian avahi package up to and including 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local malicious user to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi...
Avahi AvahiDebian Debian Linux 9.0Debian Debian Linux 10.0
NA
CVE-2008-5081
The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi prior to 0.6.24 allows remote malicious users to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.
Avahi Avahi 0.6.16Avahi Avahi 0.6.15Avahi Avahi 0.6.7Avahi Avahi 0.6.6Avahi Avahi 0.5.1Avahi Avahi 0.5Avahi Avahi 0.6.20Avahi Avahi 0.6.19Avahi Avahi 0.6.12Avahi Avahi 0.6.11Avahi Avahi 0.6.10Avahi Avahi 0.6.3Avahi Avahi 0.6.2Avahi Avahi 0.2Avahi Avahi 0.1Avahi Avahi 0.6.22Avahi Avahi 0.6.21Avahi Avahi 0.6.14Avahi Avahi 0.6.13Avahi Avahi 0.6.5Avahi Avahi 0.6.4Avahi Avahi 0.4
5.5
CVSSv3
CVE-2023-1981
A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash.
Avahi Avahi 0.7-20Fedoraproject Fedora 37Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0
NA
CVE-2021-36217
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3502. Reason: This candidate is a duplicate of CVE-2021-3502. Notes: All CVE users should reference CVE-2021-3502 instead of this candidate. All references and descriptions in this candidate have been removed...
9.1
CVSSv3
CVE-2017-6519
avahi-daemon in Avahi up to and including 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote malicious users to cause a denial of service (traffic amplification) and may cause information leakage by obtain...
Avahi AvahiAvahi Avahi 0.7Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10
5.5
CVSSv3
CVE-2021-3468
A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local malicious user to trigger an infinite loop. The highest threat fr...
Avahi AvahiDebian Debian Linux 9.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook