CVE-2011-1002

avahi: daemon infinite loop triggered by an empty UDP packet (CVE-2010-2244 fix regression)

Severity Score

7.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

avahi-core/socket.c en avahi-daemon en Avahi antes de v0.6.29 permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de un paquete UDP (1) IPv4 o (2) IPv6 vacíos al puerto 5353. NOTA: esta vulnerabilidad existe debido a una corrección incorrecta del CVE-2010-2244.

It was discovered that pango did not check for memory reallocation failures in hb_buffer_ensure() function. This could trigger a NULL pointer dereference in hb_buffer_add_glyph(), where possibly untrusted input is used as an index used for accessing members of the incorrectly reallocated array, resulting in the use of NULL address as the base array address. This can result in application crash or, possibly, code execution. The updated packages have been patched to correct this issue.

*Credits: N/A

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

Attack Vector

Adjacent

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2011-02-14 CVE Reserved
2011-02-22 CVE Published
2024-08-06 CVE Updated
2024-08-06 First Exploit
2025-06-11 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

CAPEC

References (32)

URL	Tag	Source
http://avahi.org/ticket/325	Broken Link
http://git.0pointer.de/?p=avahi.git%3Ba=commit%3Bh=46109dfec75534fe270c0ab902576f685d5ab3a6	Broken Link
http://openwall.com/lists/oss-security/2011/02/18/1	Mailing List
http://openwall.com/lists/oss-security/2011/02/18/4	Mailing List
http://osvdb.org/70948	Broken Link
http://secunia.com/advisories/43465	Broken Link
http://secunia.com/advisories/43605	Broken Link
http://secunia.com/advisories/43673	Broken Link
http://secunia.com/advisories/44131	Broken Link
http://www.openwall.com/lists/oss-security/2011/02/22/9	Mailing List
http://www.securityfocus.com/bid/46446	Broken Link
http://www.vupen.com/english/advisories/2011/0511	Broken Link
http://www.vupen.com/english/advisories/2011/0565	Broken Link
http://www.vupen.com/english/advisories/2011/0601	Broken Link
http://www.vupen.com/english/advisories/2011/0670	Broken Link
http://www.vupen.com/english/advisories/2011/0969	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/65524	Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/65525	Third Party Advisory

URL	Date	SRC
http://xorl.wordpress.com/2011/02/20/cve-2011-1002-avahi-daemon-remote-denial-of-service	2024-08-06

URL	Date	SRC

URL	Date	SRC
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055858.html	2023-12-22
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html	2023-12-22
http://secunia.com/advisories/43361	2023-12-22
http://ubuntu.com/usn/usn-1084-1	2023-12-22
http://www.debian.org/security/2011/dsa-2174	2023-12-22
http://www.mandriva.com/security/advisories?name=MDVSA-2011:037	2023-12-22
http://www.mandriva.com/security/advisories?name=MDVSA-2011:040	2023-12-22
http://www.redhat.com/support/errata/RHSA-2011-0436.html	2023-12-22
http://www.redhat.com/support/errata/RHSA-2011-0779.html	2023-12-22
http://www.vupen.com/english/advisories/2011/0448	2023-12-22
http://www.vupen.com/english/advisories/2011/0499	2023-12-22
https://bugzilla.redhat.com/show_bug.cgi?id=667187	2011-05-19
https://access.redhat.com/security/cve/CVE-2011-1002	2011-05-19

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				<= 0.6.28 Search vendor "Avahi" for product "Avahi" and version " <= 0.6.28"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.1 Search vendor "Avahi" for product "Avahi" and version "0.1"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.2 Search vendor "Avahi" for product "Avahi" and version "0.2"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.3 Search vendor "Avahi" for product "Avahi" and version "0.3"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.4 Search vendor "Avahi" for product "Avahi" and version "0.4"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.5 Search vendor "Avahi" for product "Avahi" and version "0.5"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.5.1 Search vendor "Avahi" for product "Avahi" and version "0.5.1"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.5.2 Search vendor "Avahi" for product "Avahi" and version "0.5.2"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.1 Search vendor "Avahi" for product "Avahi" and version "0.6.1"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.2 Search vendor "Avahi" for product "Avahi" and version "0.6.2"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.3 Search vendor "Avahi" for product "Avahi" and version "0.6.3"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.4 Search vendor "Avahi" for product "Avahi" and version "0.6.4"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.5 Search vendor "Avahi" for product "Avahi" and version "0.6.5"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.6 Search vendor "Avahi" for product "Avahi" and version "0.6.6"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.7 Search vendor "Avahi" for product "Avahi" and version "0.6.7"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.8 Search vendor "Avahi" for product "Avahi" and version "0.6.8"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.9 Search vendor "Avahi" for product "Avahi" and version "0.6.9"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.10 Search vendor "Avahi" for product "Avahi" and version "0.6.10"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.11 Search vendor "Avahi" for product "Avahi" and version "0.6.11"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.12 Search vendor "Avahi" for product "Avahi" and version "0.6.12"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.13 Search vendor "Avahi" for product "Avahi" and version "0.6.13"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.14 Search vendor "Avahi" for product "Avahi" and version "0.6.14"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.15 Search vendor "Avahi" for product "Avahi" and version "0.6.15"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.16 Search vendor "Avahi" for product "Avahi" and version "0.6.16"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.17 Search vendor "Avahi" for product "Avahi" and version "0.6.17"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.18 Search vendor "Avahi" for product "Avahi" and version "0.6.18"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.19 Search vendor "Avahi" for product "Avahi" and version "0.6.19"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.20 Search vendor "Avahi" for product "Avahi" and version "0.6.20"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.21 Search vendor "Avahi" for product "Avahi" and version "0.6.21"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.22 Search vendor "Avahi" for product "Avahi" and version "0.6.22"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.23 Search vendor "Avahi" for product "Avahi" and version "0.6.23"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.24 Search vendor "Avahi" for product "Avahi" and version "0.6.24"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.25 Search vendor "Avahi" for product "Avahi" and version "0.6.25"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.26 Search vendor "Avahi" for product "Avahi" and version "0.6.26"		-		Affected
Avahi Search vendor "Avahi"		Avahi Search vendor "Avahi" for product "Avahi"				0.6.27 Search vendor "Avahi" for product "Avahi" and version "0.6.27"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				15 Search vendor "Fedoraproject" for product "Fedora" and version "15"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux"				5.0 Search vendor "Redhat" for product "Enterprise Linux" and version "5.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux"				6.0 Search vendor "Redhat" for product "Enterprise Linux" and version "6.0"		-		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				8.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "8.04"		lts		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				9.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "9.10"		-		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				10.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "10.04"		lts		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				10.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "10.10"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				5.0 Search vendor "Debian" for product "Debian Linux" and version "5.0"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				6.0 Search vendor "Debian" for product "Debian Linux" and version "6.0"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				7.0 Search vendor "Debian" for product "Debian Linux" and version "7.0"		-		Affected