Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2011-1002

UNKNOWN

avahi-core/socket

Published Feb 22, 2011

Modified 1 years ago

No fix available

Details

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

References

WEBhttp://avahi.org/ticket/325 WEBhttp://git.0pointer.de/?p=avahi.git%3Ba=commit%3Bh=46109dfec75534fe270c0ab902576f685d5ab3a6 ADVISORYhttp://lists.fedoraproject.org/pipermail/package-announce/2011-March/055858.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html WEBhttp://openwall.com/lists/oss-security/2011/02/18/1 WEBhttp://openwall.com/lists/oss-security/2011/02/18/4 WEBhttp://osvdb.org/70948 ADVISORYhttp://secunia.com/advisories/43361 ADVISORYhttp://secunia.com/advisories/43465 ADVISORYhttp://secunia.com/advisories/43605 ADVISORYhttp://secunia.com/advisories/43673 ADVISORYhttp://secunia.com/advisories/44131 ADVISORYhttp://ubuntu.com/usn/usn-1084-1 ADVISORYhttp://www.debian.org/security/2011/dsa-2174 ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2011:037 ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2011:040 WEBhttp://www.openwall.com/lists/oss-security/2011/02/22/9 ADVISORYhttp://www.redhat.com/support/errata/RHSA-2011-0436.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2011-0779.html WEBhttp://www.securityfocus.com/bid/46446 WEBhttp://www.vupen.com/english/advisories/2011/0448 WEBhttp://www.vupen.com/english/advisories/2011/0499 WEBhttp://www.vupen.com/english/advisories/2011/0511 WEBhttp://www.vupen.com/english/advisories/2011/0565 WEBhttp://www.vupen.com/english/advisories/2011/0601 WEBhttp://www.vupen.com/english/advisories/2011/0670 WEBhttp://www.vupen.com/english/advisories/2011/0969 WEBhttp://xorl.wordpress.com/2011/02/20/cve-2011-1002-avahi-daemon-remote-denial-of-service/WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=667187 WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/65524 WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/65525 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2011-1002

CVSS Analysis

CVSS v2.0

5.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

PartialA:P

5/AV:N/AC:L/Au:N/C:N/I:N/A:P

Ecosystems

Timeline

PublishedFeb 22, 2011

ModifiedAug 6, 2024

CVE-2011-1002 | Mondoo Vulnerability Intelligence