Summary
Chad Seaman discovered that Avahi incorrectly handled certain messages.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2017-6519, CVE-2018-1000845)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | avahi | 0.6.31-4ubuntu1.3 |
| Ubuntu · 16.04 LTS 16.04:LTS | avahi | 0.6.32~rc+dfsg-1ubuntu2.3 |
| Ubuntu · 18.04 LTS 18.04:LTS | avahi | 0.7-3.1ubuntu1.2 |
Vulnerabilities 2
-
Critical 9.1
avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that …
-
Unscored —CVE-2018-1000845 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultID: CVE-2017-6519. Reason: This candidate is a duplicate of CVE-2017-6519. Not…