RHSA-2011:0436: Moderate: avahi security update
Avahi is an implementation of the DNS Service Discovery and Multicast DNSspecifications for Zero Configuration Networking. It facilitates servicediscovery on a local network. Avahi and Avahi-aware applications allow youto plug your computer into a network and, with no configuration, view otherpeople to chat with, view printers to print to, and find shared files onother computers.A flaw was found in the way the Avahi daemon (avahi-daemon) processedMulticast DNS (mDNS) packets with an empty payload. An attacker on thelocal network could use this flaw to cause avahi-daemon on a target systemto enter an infinite loop via an empty mDNS UDP packet. (CVE-2011-1002)All users are advised to upgrade to these updated packages, which containa backported patch to correct this issue. After installing the update,avahi-daemon will be restarted automatically.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2011:0436?
The severity of RHSA-2011:0436 is classified as moderate.
How do I fix RHSA-2011:0436?
To fix RHSA-2011:0436, update the affected Avahi packages to version 0.6.16-10.el5_6.
What does RHSA-2011:0436 affect?
RHSA-2011:0436 affects multiple Avahi packages, including avahi, avahi-compat-howl, and avahi-devel.
When was RHSA-2011:0436 released?
RHSA-2011:0436 was released on April 12, 2011.
Are there any known exploits for RHSA-2011:0436?
At the time of the advisory, there were no public exploits known for RHSA-2011:0436.