CVE-2008-5081

Published: 17 December 2008

The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.

Priority

Status

Package	Release	Status
avahi Launchpad, Ubuntu, Debian	dapper	Released (0.6.10-0ubuntu3.5)
	gutsy	Released (0.6.20-2ubuntu3.4)
	hardy	Released (0.6.22-2ubuntu4.1)
	intrepid	Released (0.6.23-2ubuntu2.1)
	upstream	Released (0.6.24)

References

https://ubuntu.com/security/notices/USN-696-1
https://www.cve.org/CVERecord?id=CVE-2008-5081
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.