Vulnerability in Avahi
CVE-2006-6870
The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service (infinite loop) via a crafted compressed DNS response with a label that points to itself.
EPSS: 0.023 (81.5th percentile) — read the EPSS interpretation.
Affected products
- Avahi — versions 0.6.7, 0.6.8, 0.6.9
- N/a — versions n/a
References
- security@ubuntu.com (x_refsource_SECUNIA, third-party-advisory)
- security@ubuntu.com (vendor-advisory, x_refsource_MANDRIVA)
- security@ubuntu.com (x_refsource_CONFIRM, Patch)
- security@ubuntu.com (vdb-entry, x_refsource_VUPEN)
- security@ubuntu.com (x_refsource_SECUNIA, third-party-advisory)
- security@ubuntu.com (vendor-advisory, x_refsource_SUSE)
- security@ubuntu.com (x_refsource_CONFIRM, Patch)
- security@ubuntu.com (x_refsource_FEDORA, vendor-advisory)
- security@ubuntu.com (x_refsource_SECUNIA, third-party-advisory)
- security@ubuntu.com (x_refsource_SECUNIA, third-party-advisory)