Back to Database
Status published
Medium
CVE-2008-5081
The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24...
Vulnerability Description
The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-5081
Credits & Attribution
No credits recorded in the NVD database.
References
- http://secunia.com/advisories/33220
- http://www.openwall.com/lists/oss-security/2008/12/14/1
- http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html
- http://secunia.com/advisories/33279
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9987
- http://www.ubuntu.com/usn/usn-696-1
- http://www.debian.org/security/2008/dsa-1690
- http://www.securityfocus.com/bid/32825
- https://www.exploit-db.com/exploits/7520
- http://security.gentoo.org/glsa/glsa-200901-11.xml
- http://secunia.com/advisories/33153
- http://secunia.com/advisories/33475
- http://avahi.org/milestone/Avahi%200.6.24
More from avahi
View All →CVE-2025-68471
Avahi has a reachable assertion in lookup_start
Medium
6.5
CVE-2025-68468
Avahi has a reachable assertion in lookup_multicast_callback
Medium
6.5
CVE-2025-68276
Avahi has a reachable assertion in avahi_wide_area_scan_cache
Medium
5.5
CVE-2025-59529
simple protocol server ignores accepts unlimited connections and logs failures without limit
Medium
5.5
CVE-2021-26720
avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed...
High
7.8
Affected Vendor
avahi
View all reports →Affected Software
avahi
Vulnerable Versions:
0, 0.1, 0.2, 0.3, 0.4, 0.5, 0.5.1, 0.5.2, 0.6.1, 0.6.2, 0.6.3, 0.6.4, 0.6.5, 0.6.6, 0.6.7, 0.6.8, 0.6.9, 0.6.10, 0.6.11, 0.6.12, 0.6.13, 0.6.14, 0.6.15, 0.6.16, 0.6.17, 0.6.18, 0.6.19, 0.6.20, 0.6.21, 0.6.22
Timeline
Official Publish:
December 17th, 2008
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.