USN-992-1 : avahi vulnerabilities

NASLDB: USN-992-1 : avahi vulnerabilities

General

ID: 49761
Name: USN-992-1 : avahi vulnerabilities

Summary: Checks dpkg output for updated package(s)

Credits: –

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS Temporal Vector: –

Port: 0
Family: Ubuntu Local Security Checks
Type: Local

Description

It was discovered that Avahi incorrectly handled certain mDNS query
packets when the reflector feature is enabled, which is not the
default configuration on Ubuntu. A remote attacker could send crafted
mDNS queries and perform a denial of service on the server and on the
network. This issue only affected Ubuntu 8.04 LTS and 9.04.
(CVE-2009-0758)

It was discovered that Avahi incorrectly handled mDNS packets with
corrupted checksums. A remote attacker could send crafted mDNS
packets and cause Avahi to crash, resulting in a denial of service.
(CVE-2010-2244)