Vulnerability Details : CVE-2006-6870
The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service (infinite loop) via a crafted compressed DNS response with a label that points to itself.
Vulnerability category: Denial of service
Products affected by CVE-2006-6870
- cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*
- cpe:2.3:a:avahi:avahi:0.6.8:*:*:*:*:*:*:*
- cpe:2.3:a:avahi:avahi:0.6.9:*:*:*:*:*:*:*
- cpe:2.3:a:avahi:avahi:0.6.10:*:*:*:*:*:*:*
- cpe:2.3:a:avahi:avahi:0.6.11:*:*:*:*:*:*:*
- cpe:2.3:a:avahi:avahi:0.6.14:*:*:*:*:*:*:*
- cpe:2.3:a:avahi:avahi:0.6.15:*:*:*:*:*:*:*
- cpe:2.3:a:avahi:avahi:0.6.12:*:*:*:*:*:*:*
- cpe:2.3:a:avahi:avahi:0.6.13:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2006-6870
3.51%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 87 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2006-6870
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
References for CVE-2006-6870
-
http://www.avahi.org/#December2006
avahi - mDNS/DNS-SDPatch
-
http://www.securityfocus.com/bid/21881
-
http://secunia.com/advisories/23628
About Secunia Research | Flexera
-
http://secunia.com/advisories/23782
About Secunia Research | Flexera
-
http://fedoranews.org/cms/node/2362
404 Not Found
-
http://secunia.com/advisories/23660
About Secunia Research | Flexera
-
http://www.avahi.org/ticket/84
Page not found · GitHub PagesPatch
-
http://secunia.com/advisories/24995
About Secunia Research | Flexera
-
http://www.mandriva.com/security/advisories?name=MDKSA-2007:003
Mandriva
-
http://secunia.com/advisories/23673
About Secunia Research | Flexera
-
http://www.avahi.org/changeset/1340
Page not found · GitHub Pages
-
http://fedoranews.org/cms/node/2408
404 Not Found
-
http://www.novell.com/linux/security/advisories/2007_007_suse.html
404 Page Not Found | SUSE
-
http://www.ubuntu.com/usn/usn-402-1
USN-402-1: Avahi vulnerability | Ubuntu security notices | Ubuntu
-
http://www.vupen.com/english/advisories/2007/0071
Site en construction
-
http://secunia.com/advisories/23644
About Secunia Research | Flexera
Jump to