Description
Avahi before 0.6.10 allows local users to cause a denial of service (mDNS/DNS-SD service disconnect) via unspecified mDNS name conflicts.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | avahi | 0.6.10-1 | — |
| Debian 13 | avahi | 0.6.10-1 | — |
| Debian 12 | avahi | 0.6.10-1 | — |
References
- http://0pointer.de/cgi-bin/viewcvs.cgi/%2Acheckout%2A/trunk/docs/NEWS?root=avahi
- 20022 third-party-advisory
- 17884 vdb-entry
- SUSE-SR:2006:011 vendor-advisory
- 20215 third-party-advisory
- avahi-mdns-name-dos(26330) vdb-entry