Evil-DB LogoEvil-DB
← All CVEs

CVE-2008-5081

medium · 5

The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.

5
CVSS
59.2%
EPSS (exploit prob.)
99th
EPSS percentile
2008-12-17
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-399

Affected products

VendorProductAffected versions
avahiavahi<= 0.6.23
avahiavahi0.1
avahiavahi0.2
avahiavahi0.3
avahiavahi0.4
avahiavahi0.5
avahiavahi0.5.1
avahiavahi0.5.2
avahiavahi0.6.1
avahiavahi0.6.2
avahiavahi0.6.3
avahiavahi0.6.4
avahiavahi0.6.5
avahiavahi0.6.6
avahiavahi0.6.7
avahiavahi0.6.8
avahiavahi0.6.9
avahiavahi0.6.10
avahiavahi0.6.11
avahiavahi0.6.12
avahiavahi0.6.13
avahiavahi0.6.14
avahiavahi0.6.15
avahiavahi0.6.16
avahiavahi0.6.17
avahiavahi0.6.18
avahiavahi0.6.19
avahiavahi0.6.20
avahiavahi0.6.21
avahiavahi0.6.22

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-5081