CVE-2009-0758

avahi: remote DoS via legacy unicast mDNS queries

Severity Score

7.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service (network bandwidth and CPU consumption) via a crafted legacy unicast mDNS query packet that triggers a multicast packet storm.

La función originates_from_local_legacy_unicast_socket en avahi-core/server.c en avahi-daemon v0.6.23 no tiene en cuenta la orden del byte de red de un numero de puerto cuando se esta procesando la llegada de paquetes multidifusión, lo que permite a atacantes remotos producir una denegación de servicio (agotamiento de ancho de banda y CPU) a través de un paquete de petición legada monodifusión mDNS que dispara una tormenta de paquetes multidifusión.

*Credits: N/A

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

Attack Vector

Adjacent

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2009-03-03 CVE Reserved
2009-03-03 CVE Published
2024-06-30 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-399: Resource Management Errors

CAPEC

References (9)

URL	Tag	Source
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517683	X_refsource_misc
http://secunia.com/advisories/38420	Third Party Advisory
http://www.openwall.com/lists/oss-security/2009/03/02/1	Mailing List
http://www.securityfocus.com/bid/33946	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html	2010-08-12
http://www.debian.org/security/2010/dsa-2086	2010-08-12
http://www.mandriva.com/security/advisories?name=MDVSA-2009:076	2010-08-12
https://access.redhat.com/security/cve/CVE-2009-0758	2010-07-13
https://bugzilla.redhat.com/show_bug.cgi?id=488314	2010-07-13

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Avahi Search vendor "Avahi"		Avahi-daemon Search vendor "Avahi" for product "Avahi-daemon"				0.6.23 Search vendor "Avahi" for product "Avahi-daemon" and version "0.6.23"		-		Affected