Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 251315 - net-dns/avahi <0.6.24 mDNS port 0 DoS (CVE-2008-5081)
Summary: net-dns/avahi <0.6.24 mDNS port 0 DoS (CVE-2008-5081)
Status: RESOLVED DUPLICATE of bug 250913
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-12-17 15:37 UTC by Robert Buchholz (RETIRED)
Modified: 2008-12-17 15:38 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Robert Buchholz (RETIRED) gentoo-dev 2008-12-17 15:37:54 UTC
CVE-2008-5081 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-5081):
  The originates_from_local_legacy_unicast_socket function
  (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows
  remote attackers to cause a denial of service (crash) via a crafted
  mDNS packet with a source port of 0, which triggers an assertion
  failure.
Comment 1 Robert Buchholz (RETIRED) gentoo-dev 2008-12-17 15:38:25 UTC

*** This bug has been marked as a duplicate of bug 250913 ***