Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-0758

Опубликовано: 03 мар. 2009
Источник: nvd
CVSS2: 7.8
EPSS Низкий

Описание

The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service (network bandwidth and CPU consumption) via a crafted legacy unicast mDNS query packet that triggers a multicast packet storm.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:avahi:avahi-daemon:0.6.23:*:*:*:*:*:*:*

EPSS

Процентиль: 78%
0.0126
Низкий

7.8 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

ubuntu
больше 16 лет назад

The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service (network bandwidth and CPU consumption) via a crafted legacy unicast mDNS query packet that triggers a multicast packet storm.

redhat
больше 16 лет назад

The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service (network bandwidth and CPU consumption) via a crafted legacy unicast mDNS query packet that triggers a multicast packet storm.

debian
больше 16 лет назад

The originates_from_local_legacy_unicast_socket function in avahi-core ...

github
около 3 лет назад

The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service (network bandwidth and CPU consumption) via a crafted legacy unicast mDNS query packet that triggers a multicast packet storm.

fstec
около 16 лет назад

Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации

EPSS

Процентиль: 78%
0.0126
Низкий

7.8 High

CVSS2

Дефекты

CWE-399