PT-2009-1085 · Avahi+1 · Avahi-Daemon+1

Steffen Joeris · Published 2009-03-03 · Updated 2024-06-15 · CVE-2009-0758

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions avahi-daemon versions 0.6.23 through 0.6.24-r2 avahi-daemon version 0.6.23

Description The issue is related to the originates from local legacy unicast socket function in avahi-daemon, which does not properly handle the network byte order of a port number when processing incoming multicast packets. This allows remote attackers to cause a denial of service by consuming network bandwidth and CPU resources via a crafted legacy unicast mDNS query packet that triggers a multicast packet storm. The vulnerability can be exploited remotely and may lead to disruption of protected information availability.

Recommendations For avahi-daemon versions 0.6.23 through 0.6.24-r2, update to version 0.6.24-r2 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2015-09386

CVE-2009-0758

DSA-2086-1

OPENSUSE-SU-2024:10363-1

RHSA-2010:0528

RHSA-2010_0528

Affected Products

Red Hat

Avahi-Daemon

References · 21

• https://osv.dev/vulnerability/CVE-2009-0758 · Vendor Advisory
• http://debian.org/security/2010/dsa-2086 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-0758 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10363-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2009:076 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09386 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-0758 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-0758 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09419 · Security Note
• http://openwall.com/lists/oss-security/2009/03/02/1 · Note
• http://securityfocus.com/bid/33946 · Note
• https://suse.com/security/cve/CVE-2011-1002 · Note
• https://access.redhat.com/errata/RHSA-2010:0528 · Note
• https://access.redhat.com/security/cve/CVE-2010-2244 · Note