avahi

2007-07-22

Page content

Author: vmiklos
Vulnerable: 0.6.17-2
Unaffected: 0.6.17-3terminus1

Emanuele Aina has reported a security issue in Avahi, which can be exploited by malicious, local users to cause a DoS (Denial of Service). The security issue is caused due to an “assert()” error when receiving empty TXT data over D-Bus for registration. This can be exploited to terminate the Avahi daemon by sending empty TXT data.

Bug Tracker URL: http://bugs.frugalware.org/task/2209

CVEs:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3372