Back to Database
Status published
Medium
CVE-2011-1002
avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers...
Vulnerability Description
avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-1002
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.redhat.com/support/errata/RHSA-2011-0779.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65525
- http://www.openwall.com/lists/oss-security/2011/02/22/9
- http://www.redhat.com/support/errata/RHSA-2011-0436.html
- http://www.vupen.com/english/advisories/2011/0511
- http://openwall.com/lists/oss-security/2011/02/18/1
- http://secunia.com/advisories/43605
- http://secunia.com/advisories/43465
- http://secunia.com/advisories/43673
- http://www.vupen.com/english/advisories/2011/0601
- https://bugzilla.redhat.com/show_bug.cgi?id=667187
- http://www.vupen.com/english/advisories/2011/0969
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65524
- http://secunia.com/advisories/44131
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:040
- http://www.securityfocus.com/bid/46446
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:037
- http://www.vupen.com/english/advisories/2011/0448
- http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
- http://www.debian.org/security/2011/dsa-2174
- http://www.vupen.com/english/advisories/2011/0499
- http://osvdb.org/70948
- http://secunia.com/advisories/43361
- http://www.vupen.com/english/advisories/2011/0670
- http://xorl.wordpress.com/2011/02/20/cve-2011-1002-avahi-daemon-remote-denial-of-service/
- http://avahi.org/ticket/325
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055858.html
- http://www.vupen.com/english/advisories/2011/0565
- http://git.0pointer.de/?p=avahi.git%3Ba=commit%3Bh=46109dfec75534fe270c0ab902576f685d5ab3a6
- http://ubuntu.com/usn/usn-1084-1
- http://openwall.com/lists/oss-security/2011/02/18/4
More from avahi
View All →CVE-2025-68471
Avahi has a reachable assertion in lookup_start
Medium
6.5
CVE-2025-68468
Avahi has a reachable assertion in lookup_multicast_callback
Medium
6.5
CVE-2025-68276
Avahi has a reachable assertion in avahi_wide_area_scan_cache
Medium
5.5
CVE-2025-59529
simple protocol server ignores accepts unlimited connections and logs failures without limit
Medium
5.5
CVE-2021-26720
avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed...
High
7.8
Affected Vendor
avahi
View all reports →Affected Software
avahi, fedora, enterprise linux, ubuntu linux, debian linux
Vulnerable Versions:
0, 0.1, 0.2, 0.3, 0.4, 0.5, 0.5.1, 0.5.2, 0.6.1, 0.6.2, 0.6.3, 0.6.4, 0.6.5, 0.6.6, 0.6.7, 0.6.8, 0.6.9, 0.6.10, 0.6.11, 0.6.12, 0.6.13, 0.6.14, 0.6.15, 0.6.16, 0.6.17, 0.6.18, 0.6.19, 0.6.20, 0.6.21, 0.6.22, 0.6.23, 0.6.24, 0.6.25, 0.6.26, 0.6.27, 15, 5.0, 6.0, 8.04, 9.10, 10.04, 10.10, 7.0
Timeline
Official Publish:
February 22nd, 2011
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.