Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-5081

The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.

Published

2008-12-17T02:30:00.187

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-399
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application avahi avahi ≤ 0.6.23 Yes
Application avahi avahi 0.1 Yes
Application avahi avahi 0.2 Yes
Application avahi avahi 0.3 Yes
Application avahi avahi 0.4 Yes
Application avahi avahi 0.5 Yes
Application avahi avahi 0.5.1 Yes
Application avahi avahi 0.5.2 Yes
Application avahi avahi 0.6.1 Yes
Application avahi avahi 0.6.2 Yes
Application avahi avahi 0.6.3 Yes
Application avahi avahi 0.6.4 Yes
Application avahi avahi 0.6.5 Yes
Application avahi avahi 0.6.6 Yes
Application avahi avahi 0.6.7 Yes
Application avahi avahi 0.6.8 Yes
Application avahi avahi 0.6.9 Yes
Application avahi avahi 0.6.10 Yes
Application avahi avahi 0.6.11 Yes
Application avahi avahi 0.6.12 Yes
Application avahi avahi 0.6.13 Yes
Application avahi avahi 0.6.14 Yes
Application avahi avahi 0.6.15 Yes
Application avahi avahi 0.6.16 Yes
Application avahi avahi 0.6.17 Yes
Application avahi avahi 0.6.18 Yes
Application avahi avahi 0.6.19 Yes
Application avahi avahi 0.6.20 Yes
Application avahi avahi 0.6.21 Yes
Application avahi avahi 0.6.22 Yes
References