CVE-2011-1002
NoneCVSS
—
EPSS
29.4%
Published
Feb 22, 2011
CISA due date
—
The record
avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | avahi | 0 | 0.6.28-4 |
| Debian:12 | avahi | 0 | 0.6.28-4 |
| Debian:13 | avahi | 0 | 0.6.28-4 |
| Debian:5.0 | avahi | 0 | 0.6.23-3lenny3 |
| Debian:6.0 | avahi | 0 | 0.6.27-2+squeeze1 |
| Red Hat:enterprise_linux:5::server | avahi | 0 | 0:0.6.16-10.el5_6 |
| Red Hat:enterprise_linux:5::server | avahi-compat-howl | 0 | 0:0.6.16-10.el5_6 |
| Red Hat:enterprise_linux:5::server | avahi-compat-howl-devel | 0 | 0:0.6.16-10.el5_6 |
| Red Hat:enterprise_linux:5::server | avahi-compat-libdns_sd | 0 | 0:0.6.16-10.el5_6 |
| Red Hat:enterprise_linux:5::server | avahi-compat-libdns_sd-devel | 0 | 0:0.6.16-10.el5_6 |
| Red Hat:enterprise_linux:5::server | avahi-debuginfo | 0 | 0:0.6.16-10.el5_6 |
| Red Hat:enterprise_linux:5::server | avahi-devel | 0 | 0:0.6.16-10.el5_6 |
| Red Hat:enterprise_linux:5::server | avahi-glib | 0 | 0:0.6.16-10.el5_6 |
| Red Hat:enterprise_linux:5::server | avahi-glib-devel | 0 | 0:0.6.16-10.el5_6 |
| Red Hat:enterprise_linux:5::server | avahi-qt3 | 0 | 0:0.6.16-10.el5_6 |
| Red Hat:enterprise_linux:5::server | avahi-qt3-devel | 0 | 0:0.6.16-10.el5_6 |
| Red Hat:enterprise_linux:5::server | avahi-tools | 0 | 0:0.6.16-10.el5_6 |
| Red Hat:enterprise_linux:6::client | avahi | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-autoipd | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-compat-howl | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-compat-howl-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-compat-libdns_sd | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-compat-libdns_sd-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-debuginfo | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-dnsconfd | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-glib | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-glib-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-gobject | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-gobject-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-libs | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-qt3 | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-qt3-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-qt4 | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-qt4-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-tools | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-ui | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-ui-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::client | avahi-ui-tools | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-autoipd | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-compat-howl | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-compat-howl-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-compat-libdns_sd | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-compat-libdns_sd-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-debuginfo | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-dnsconfd | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-glib | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-glib-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-gobject | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-gobject-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-libs | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-qt3 | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-qt3-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-qt4 | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-qt4-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-tools | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-ui | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-ui-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::computenode | avahi-ui-tools | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-autoipd | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-compat-howl | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-compat-howl-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-compat-libdns_sd | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-compat-libdns_sd-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-debuginfo | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-dnsconfd | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-glib | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-glib-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-gobject | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-gobject-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-libs | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-qt3 | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-qt3-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-qt4 | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-qt4-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-tools | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-ui | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-ui-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::server | avahi-ui-tools | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-autoipd | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-compat-howl | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-compat-howl-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-compat-libdns_sd | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-compat-libdns_sd-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-debuginfo | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-dnsconfd | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-glib | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-glib-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-gobject | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-gobject-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-libs | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-qt3 | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-qt3-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-qt4 | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-qt4-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-tools | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-ui | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-ui-devel | 0 | 0:0.6.25-11.el6 |
| Red Hat:enterprise_linux:6::workstation | avahi-ui-tools | 0 | 0:0.6.25-11.el6 |
| openSUSE:Tumbleweed | avahi | 0 | 0.6.32-2.3 |
Related vulnerabilities
- CVE-2024-52616 A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly… Also affects avahi
- CVE-2024-52615 A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS… Also affects avahi
- CVE-2017-6519 avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast… Also affects avahi
- CVE-2008-5081 The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in… Also affects avahi
- CVE-2026-34933 Avahi is a system which facilitates service discovery on a local network via the… Also affects avahi
- CVE-2026-24401 Avahi is a system which facilitates service discovery on a local network via the… Also affects avahi
- CVE-2025-68468 Avahi is a system which facilitates service discovery on a local network via the… Also affects avahi
- CVE-2025-68471 Avahi is a system which facilitates service discovery on a local network via the… Also affects avahi