CVE-2011-1002

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or…

published February 22, 2011

CVSS

—

EPSS

29%

Percentile

98.2

In the wild

Unconfirmed

What it is

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.29361 · 98.2th percentile
Published: 2011-02-22T18:00Z

EPSS history

Timeline

22 FEB 18:00Z
avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or…
cvelistv5