CVE-2011-1002

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

29.36% chance of exploitation in the next 30 days, 98th percentile

Published

2011-02-22

Updated

2024-08-06

Proof-of-concept exploits (1)

• Howertx/avahi-dos0★ · 2024-07-14

References

• CVE Record
• NVD entry

Related

• CVE-2011-10019
• CVE-2011-10020
• CVE-2011-10018
• CVE-2011-10021
• CVE-2011-10017
• CVE-2011-10022