CVE-2006-6870 - CVE House
Back to Database
Status published Medium CVE-2006-6870

The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows...

Vulnerability Description

The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service (infinite loop) via a crafted compressed DNS response with a label that points to itself.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-6870

Credits & Attribution

No credits recorded in the NVD database.

References

More from avahi

View All →
CVE-2025-68471
Avahi has a reachable assertion in lookup_start
Medium 6.5
CVE-2025-68468
Avahi has a reachable assertion in lookup_multicast_callback
Medium 6.5
CVE-2025-68276
Avahi has a reachable assertion in avahi_wide_area_scan_cache
Medium 5.5
CVE-2025-59529
simple protocol server ignores accepts unlimited connections and logs failures without limit
Medium 5.5
CVE-2021-26720
avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed...
High 7.8

Affected Vendor

Affected Software

avahi
Vulnerable Versions:
0.6.7, 0.6.8, 0.6.9, 0.6.10, 0.6.11, 0.6.12, 0.6.13, 0.6.14, 0.6.15

Timeline

Official Publish: January 5th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.