REDHAT-BUG-607293: Medium severity avahi autoip daemon vulnerability
Ludwig Nussel reported: [1] http://www.openwall.com/lists/oss-security/2010/06/23/4
a deficiency in the way avahi daemon processed packets with corrupted checksum(s). A remote attacker on the same local are network (LAN) could send a DNS packet with broken checksum, that would cause avahi-daemon to exit unexpectedly due to a failed assertion check. Different vulnerability than CVE-2008-5081.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-607293?
The severity of REDHAT-BUG-607293 is high due to the potential for remote code execution from a local attacker.
How do I fix REDHAT-BUG-607293?
To fix REDHAT-BUG-607293, ensure that you update the avahi-daemon package to its latest version as provided by your software vendor.
Who is affected by REDHAT-BUG-607293?
The vulnerability REDHAT-BUG-607293 affects systems running the Avahi avahi-daemon software.
What type of attack does REDHAT-BUG-607293 exploit?
REDHAT-BUG-607293 exploits a vulnerability in packet processing that can be triggered by corrupted checksums from remote attackers on the same LAN.
Can REDHAT-BUG-607293 lead to data breaches?
Yes, if exploited, REDHAT-BUG-607293 may allow an attacker to execute arbitrary code, potentially leading to data breaches.