Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-1002

medium · 5

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

5
CVSS
29.4%
EPSS (exploit prob.)
98th
EPSS percentile
2011-02-22
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-835

Affected products

VendorProductAffected versions
avahiavahi<= 0.6.28
avahiavahi0.1
avahiavahi0.2
avahiavahi0.3
avahiavahi0.4
avahiavahi0.5
avahiavahi0.5.1
avahiavahi0.5.2
avahiavahi0.6.1
avahiavahi0.6.2
avahiavahi0.6.3
avahiavahi0.6.4
avahiavahi0.6.5
avahiavahi0.6.6
avahiavahi0.6.7
avahiavahi0.6.8
avahiavahi0.6.9
avahiavahi0.6.10
avahiavahi0.6.11
avahiavahi0.6.12
avahiavahi0.6.13
avahiavahi0.6.14
avahiavahi0.6.15
avahiavahi0.6.16
avahiavahi0.6.17
avahiavahi0.6.18
avahiavahi0.6.19
avahiavahi0.6.20
avahiavahi0.6.21
avahiavahi0.6.22
avahiavahi0.6.23
avahiavahi0.6.24
avahiavahi0.6.25
avahiavahi0.6.26
avahiavahi0.6.27
fedoraprojectfedora15
redhatenterprise_linux5.0
redhatenterprise_linux6.0
canonicalubuntu_linux8.04
canonicalubuntu_linux9.10

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-1002