CVE-2008-5081

The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.

Link	Resource
http://avahi.org/milestone/Avahi%200.6.24
http://www.openwall.com/lists/oss-security/2008/12/14/1
http://www.securityfocus.com/bid/32825
http://www.ubuntu.com/usn/usn-696-1
http://secunia.com/advisories/33279
http://www.debian.org/security/2008/dsa-1690
http://secunia.com/advisories/33220
http://security.gentoo.org/glsa/glsa-200901-11.xml
http://secunia.com/advisories/33153
http://secunia.com/advisories/33475
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html
https://www.exploit-db.com/exploits/7520
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9987

Configuration 1

cpe:2.3:a:avahi:avahi:0.6.5:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.20:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.19:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.5.2:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.1:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.13:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.15:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.17:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.16:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.3:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.9:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.2:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.1:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.14:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.10:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.6:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.5:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.22:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.4:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.11:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.3:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.8:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.18:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.12:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.4:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.21:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.6.2:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:0.5.1:*:*:*:*:*:*:* cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*

---

Published : 2008-12-17 02:30

Updated : 2017-09-29 01:32

---

NVD link : CVE-2008-5081

Mitre link : CVE-2008-5081

No products.

CWE-399