CVE-2008-5081: Medium severity avahi autoip daemon vulnerability
Hugo Dias of the Synchron Security Labs discovered a remote denial of service flaw in the avahi daemon. A crafted multicast DNS (mDNS) packet with source port 0 can trigger assertion in originatesfromlocallegacyunicastsocket() function in avahi-core/server.c -- assert(port > 0); -- causing the daemon to call abort() and exit unexpectedly.
Scope of this attack is usually limited to a single LAN.
Other sources
The originatesfromlocallegacyunicastsocket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5081?
CVE-2008-5081 is classified as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2008-5081?
To fix CVE-2008-5081, upgrade Avahi to version 0.6.24 or later.
Which versions of Avahi are affected by CVE-2008-5081?
Avahi versions prior to 0.6.24, including 0.6.15, 0.6.20, and others, are affected by CVE-2008-5081.
What impact does CVE-2008-5081 have on my system?
CVE-2008-5081 can allow remote attackers to crash the Avahi daemon, resulting in a denial of service.
Is CVE-2008-5081 remotely exploitable?
Yes, CVE-2008-5081 is remotely exploitable through crafted mDNS packets.