Red Hat Security AdvisoryRHSA-2010:0528
avahi security update
Released 2010-07-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) avahi-0.6.16-9.el5_5, avahi-0.6.16-9.el5_5.i386, avahi-0.6.16-9.el5_5.ia64 +41
- Red Hat Enterprise Linux Desktop (v. 5 client) avahi-0.6.16-9.el5_5, avahi-0.6.16-9.el5_5.i386, avahi-compat-howl-0.6.16-9.el5_5 +14
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) avahi-0.6.16-9.el5_5, avahi-compat-howl-devel-0.6.16-9.el5_5, avahi-compat-howl-devel-0.6.16-9.el5_5.i386 +8
Fixes 2 records
Priority LOW 38
The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02011 · Published 2009-03-03 · Fixed CWE-399
Priority LOW 24
The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNS packet with an invalid chec…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02273 · Published 2010-07-07 · Fixed
