5

CVE-2008-5081

The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.

Data is provided by the National Vulnerability Database (NVD)
Avahi ≫ Avahi Version <= 0.6.23
Avahi ≫ Avahi Version0.1
Avahi ≫ Avahi Version0.2
Avahi ≫ Avahi Version0.3
Avahi ≫ Avahi Version0.4
Avahi ≫ Avahi Version0.5
Avahi ≫ Avahi Version0.5.1
Avahi ≫ Avahi Version0.5.2
Avahi ≫ Avahi Version0.6.1
Avahi ≫ Avahi Version0.6.2
Avahi ≫ Avahi Version0.6.3
Avahi ≫ Avahi Version0.6.4
Avahi ≫ Avahi Version0.6.5
Avahi ≫ Avahi Version0.6.6
Avahi ≫ Avahi Version0.6.7
Avahi ≫ Avahi Version0.6.8
Avahi ≫ Avahi Version0.6.9
Avahi ≫ Avahi Version0.6.10
Avahi ≫ Avahi Version0.6.11
Avahi ≫ Avahi Version0.6.12
Avahi ≫ Avahi Version0.6.13
Avahi ≫ Avahi Version0.6.14
Avahi ≫ Avahi Version0.6.15
Avahi ≫ Avahi Version0.6.16
Avahi ≫ Avahi Version0.6.17
Avahi ≫ Avahi Version0.6.18
Avahi ≫ Avahi Version0.6.19
Avahi ≫ Avahi Version0.6.20
Avahi ≫ Avahi Version0.6.21
Avahi ≫ Avahi Version0.6.22
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 71.17% 0.986
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P