CVE-2011-1002

Scores

EPSS

0.783medium78.3%
0%20%40%60%80%100%

Percentile: 78.3%

CVSS

3.3low2.0
0246810

CVSS Score: 3.3/10

All CVSS Scores

CVSS 2.0
3.3

Vector: AV:A/AC:L/Au:N/C:N/I:N/A:P

Description

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

debiannvdredhatubuntu

CWEs

CWE-835

Vulnerable Software (9)

Type: Configuration

Product: avahi

Operating System: ubuntu hardy 8.04

Trait:
{  "fixed": "0.6.22-2ubuntu4.3"}

Source: ubuntu

Type: Configuration

Product: avahi

Operating System: rhel 5

Trait:
{  "fixed": "0.6.16-10.el5_6"}

Source: redhat

Type: Configuration

Product: avahi

Operating System: rhel 6

Trait:
{  "fixed": "0.6.25-11.el6"}

Source: redhat

Type: Configuration

Product: avahi

Operating System: debian

Trait:
{  "fixed": "0.6.28-4"}

Source: debian

Type: Configuration

Vendor: avahi

Product: avahi

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*",      "versionEndIncluding": "0.6.28",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:avahi:avah...

Source: nvd

Type: Configuration

Vendor: canonical

Product: ubuntu_linux

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*...

Source: nvd

Type: Configuration

Vendor: debian

Product: debian_linux

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",...

Source: nvd

Type: Configuration

Vendor: fedoraproject

Product: fedora

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*...

Source: nvd

Type: Configuration

Vendor: redhat

Product: enterprise_linux

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*...

Source: nvd