CVE-2008-5081
NoneCVSS
—
EPSS
59.2%
Published
Dec 17, 2008
CISA due date
—
The record
The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | avahi | 0 | 0.6.23-3 |
| Debian:11 | avahi | 0 | 0.6.23-3 |
| Debian:12 | avahi | 0 | 0.6.23-3 |
| Debian:13 | avahi | 0 | 0.6.23-3 |
| Debian:4.0 | avahi | 0 | 0.6.16-3etch2 |
| Debian:5.0 | avahi | 0 | 0.6.22-3+lenny1 |
| Red Hat:enterprise_linux:5::client | avahi | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client | avahi-compat-howl | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client | avahi-compat-howl-devel | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client | avahi-compat-libdns_sd | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client | avahi-compat-libdns_sd-devel | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client | avahi-debuginfo | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client | avahi-devel | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client | avahi-glib | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client | avahi-glib-devel | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client | avahi-qt3 | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client | avahi-qt3-devel | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client | avahi-tools | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | avahi | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | avahi-compat-howl | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | avahi-compat-howl-devel | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | avahi-compat-libdns_sd | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | avahi-compat-libdns_sd-devel | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | avahi-debuginfo | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | avahi-devel | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | avahi-glib | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | avahi-glib-devel | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | avahi-qt3 | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | avahi-qt3-devel | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::client_workstation | avahi-tools | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::server | avahi | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::server | avahi-compat-howl | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::server | avahi-compat-howl-devel | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::server | avahi-compat-libdns_sd | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::server | avahi-compat-libdns_sd-devel | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::server | avahi-debuginfo | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::server | avahi-devel | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::server | avahi-glib | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::server | avahi-glib-devel | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::server | avahi-qt3 | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::server | avahi-qt3-devel | 0 | 0:0.6.16-1.el5_2.1 |
| Red Hat:enterprise_linux:5::server | avahi-tools | 0 | 0:0.6.16-1.el5_2.1 |
| openSUSE:Tumbleweed | avahi | 0 | 0.8-7.2 |
Related vulnerabilities
- CVE-2017-6519 avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast… Also affects avahi
- CVE-2024-52616 A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly… Also affects avahi
- CVE-2024-52615 A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS… Also affects avahi
- CVE-2011-1002 avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to… Also affects avahi
- CVE-2026-34933 Avahi is a system which facilitates service discovery on a local network via the… Also affects avahi
- CVE-2026-24401 Avahi is a system which facilitates service discovery on a local network via the… Also affects avahi
- CVE-2025-68468 Avahi is a system which facilitates service discovery on a local network via the… Also affects avahi
- CVE-2025-68471 Avahi is a system which facilitates service discovery on a local network via the… Also affects avahi