Every CVE Search/ Get API key

CVE-2018-1000845

CVE-2018-1000845 does not affect BellSoft software

No scoreFix availableRejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultID: CVE-2017-6519. Reason: This candidate is a duplicate of CVE-2017-6519. Notes: All CVE users should reference CVE-2017-6519 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

What each source reports

CVE List No score

DO NOT USE THIS CANDIDATE NUMBER. ConsultID: CVE-2017-6519. Reason: This candidate is a duplicate of CVE-2017-6519. Notes: All CVE users should reference CVE-2017-6519 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
CVE-2018-1000845
Updated
2026-11-02
EUVDEUVD-2018-2033 No score

DO NOT USE THIS CANDIDATE NUMBER. ConsultID: CVE-2017-6519. Reason: This candidate is a duplicate of CVE-2017-6519. Notes: All CVE users should reference CVE-2017-6519 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
EUVD-2018-2033
Updated
2026-11-03
NVD No score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID: CVE-2017-6519. Reason: This candidate is a duplicate of CVE-2017-6519. Notes: All CVE users should reference CVE-2017-6519 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
CVE-2018-1000845
Updated
2026-11-02
OSVALPINE-CVE-2018-1000845 No score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID: CVE-2017-6519. Reason: This candidate is a duplicate of CVE-2017-6519. Notes: All CVE users should reference CVE-2017-6519 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
ALPINE-CVE-2018-1000845
Updated
2026-11-02
OSV No score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID: CVE-2017-6519. Reason: This candidate is a duplicate of CVE-2017-6519. Notes: All CVE users should reference CVE-2017-6519 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
CVE-2018-1000845
Updated
2026-11-02
OSVopenSUSE-SU-2019:0197-1 No score

Security update for avahi

This update for avahi fixes the following issues:

Security issue fixed:

  • CVE-2018-1000845: Fixed DNS amplification and reflection to spoofed addresses (DOS) (bsc#1120281)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:0197-1
Updated
2026-11-02
Show 6 moreShow less
OSVopenSUSE-SU-2024:10643-1 No score

avahi-0.8-7.2 on GA media

These are all security issues fixed in the avahi-0.8-7.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10643-1
Updated
2026-11-02
OSVSUSE-SU-2019:0179-1 No score

Security update for avahi

This update for avahi fixes the following issues:

Security issue fixed:

  • CVE-2018-1000845: Fixed DNS amplification and reflection to spoofed addresses (DOS) (bsc#1120281)
Record
SUSE-SU-2019:0179-1
Updated
2026-11-02
OSVSUSE-SU-2019:0285-1 No score

Security update for avahi

This update for avahi fixes the following issues:

Security issue fixed:

  • CVE-2018-1000845: Fixed DNS amplification and reflection to spoofed addresses (DOS) (bsc#1120281)
Record
SUSE-SU-2019:0285-1
Updated
2026-11-02
OSVSUSE-SU-2019:13947-1 No score

Security update for avahi

This update for avahi fixes the following issues:

Security issue fixed:

  • CVE-2018-1000845: Fixed DNS amplification and reflection to spoofed addresses (DOS) (bsc#1120281)
Record
SUSE-SU-2019:13947-1
Updated
2026-11-02
OSVUBUNTU-CVE-2018-1000845 No score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID: CVE-2017-6519. Reason: This candidate is a duplicate of CVE-2017-6519. Notes: All CVE users should reference CVE-2017-6519 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Record
UBUNTU-CVE-2018-1000845
Updated
2026-11-02
OSVUSN-3876-1 No score

avahi vulnerabilities

Chad Seaman discovered that Avahi incorrectly handled certain messages. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-6519, CVE-2018-1000845)

Record
USN-3876-1
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
avahi
Alpine:v3.10
 before 0.7-r2
0.7-r2
avahi
Alpine:v3.11
 before 0.7-r2
0.7-r2
avahi
Alpine:v3.12
 before 0.7-r2
0.7-r2
avahi
Alpine:v3.13
 before 0.7-r2
0.7-r2
avahi
Alpine:v3.14
 before 0.7-r2
0.7-r2
avahi
Alpine:v3.15
 before 0.7-r2
0.7-r2
avahi
Alpine:v3.16
 before 0.7-r2
0.7-r2
avahi
Alpine:v3.17
 before 0.7-r2
0.7-r2
avahi
Alpine:v3.18
 before 0.7-r2
0.7-r2
avahi
Alpine:v3.19
 before 0.7-r2
0.7-r2
Show 47 moreShow less
Affected packages
PackageAffectedFixed
avahi
Alpine:v3.20
 before 0.7-r2
0.7-r2
avahi
Alpine:v3.21
 before 0.7-r2
0.7-r2
avahi
Alpine:v3.22
 before 0.7-r2
0.7-r2
avahi
Alpine:v3.23
 before 0.7-r2
0.7-r2
avahi
Alpine:v3.24
 before 0.7-r2
0.7-r2
avahi
Alpine:v3.7
 before 0.6.32-r5
0.6.32-r5
avahi
Alpine:v3.8
 before 0.7-r2
0.7-r2
avahi
Alpine:v3.9
 before 0.7-r2
0.7-r2
avahi
SUSE:Linux Enterprise Desktop 12 SP3
 before 0.6.32-32.3.1
0.6.32-32.3.1
avahi-glib2
SUSE:Linux Enterprise Desktop 12 SP3
 before 0.6.32-32.3.2
0.6.32-32.3.2
avahi
SUSE:Linux Enterprise Desktop 12 SP4
 before 0.6.32-32.3.1
0.6.32-32.3.1
avahi-glib2
SUSE:Linux Enterprise Desktop 12 SP4
 before 0.6.32-32.3.2
0.6.32-32.3.2
avahi
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 0.6.32-32.3.1
0.6.32-32.3.1
avahi-glib2
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 0.6.32-32.3.2
0.6.32-32.3.2
avahi
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 0.6.32-32.3.1
0.6.32-32.3.1
avahi-glib2
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 0.6.32-32.3.2
0.6.32-32.3.2
avahi
SUSE:Linux Enterprise Server 12 SP3
 before 0.6.32-32.3.1
0.6.32-32.3.1
avahi-glib2
SUSE:Linux Enterprise Server 12 SP3
 before 0.6.32-32.3.2
0.6.32-32.3.2
avahi
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 0.6.32-32.3.1
0.6.32-32.3.1
avahi-glib2
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 0.6.32-32.3.2
0.6.32-32.3.2
avahi
SUSE:Linux Enterprise Server 12 SP4
 before 0.6.32-32.3.1
0.6.32-32.3.1
avahi-glib2
SUSE:Linux Enterprise Server 12 SP4
 before 0.6.32-32.3.2
0.6.32-32.3.2
avahi
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 0.6.32-32.3.1
0.6.32-32.3.1
avahi-glib2
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 0.6.32-32.3.2
0.6.32-32.3.2
avahi-glib2
SUSE:Linux Enterprise Workstation Extension 12 SP3
 before 0.6.32-32.3.2
0.6.32-32.3.2
avahi-glib2
SUSE:Linux Enterprise Workstation Extension 12 SP4
 before 0.6.32-32.3.2
0.6.32-32.3.2
avahi
SUSE:Linux Enterprise Module for Basesystem 15
 before 0.6.32-5.3.1
0.6.32-5.3.1
avahi-glib2
SUSE:Linux Enterprise Module for Basesystem 15
 before 0.6.32-5.3.1
0.6.32-5.3.1
avahi
SUSE:Linux Enterprise Module for Desktop Applications 15
 before 0.6.32-5.3.1
0.6.32-5.3.1
avahi-glib2
SUSE:Linux Enterprise Module for Desktop Applications 15
 before 0.6.32-5.3.1
0.6.32-5.3.1
avahi
SUSE:Linux Enterprise Module for Package Hub 15
 before 0.6.32-5.3.1
0.6.32-5.3.1
avahi
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 0.6.23-35.6.2
0.6.23-35.6.2
avahi-glib2
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 0.6.23-35.6.1
0.6.23-35.6.1
avahi-mono
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 0.6.23-35.6.1
0.6.23-35.6.1
avahi
SUSE:Linux Enterprise Server 11 SP4
 before 0.6.23-35.6.2
0.6.23-35.6.2
avahi-glib2
SUSE:Linux Enterprise Server 11 SP4
 before 0.6.23-35.6.1
0.6.23-35.6.1
avahi
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 0.6.23-35.6.2
0.6.23-35.6.2
avahi-glib2
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 0.6.23-35.6.1
0.6.23-35.6.1
avahi
Ubuntu:14.04:LTS
 before 0.6.31-4ubuntu1.3, plus listed versions
0.6.31-2ubuntu40.6.31-2ubuntu50.6.31-3ubuntu10.6.31-4ubuntu10.6.31-4ubuntu1.10.6.31-4ubuntu1.2
0.6.31-4ubuntu1.3
avahi
Ubuntu:16.04:LTS
 before 0.6.32~rc+dfsg-1ubuntu2.3, plus listed versions
0.6.31-4ubuntu40.6.32~rc+dfsg-1ubuntu20.6.32~rc+dfsg-1ubuntu2.10.6.32~rc+dfsg-1ubuntu2.2
0.6.32~rc+dfsg-1ubuntu2.3
avahi
Ubuntu:18.04:LTS
 before 0.7-3.1ubuntu1.2, plus listed versions
0.6.32-1ubuntu10.7-3ubuntu10.7-3ubuntu20.7-3.1ubuntu10.7-3.1ubuntu1.1
0.7-3.1ubuntu1.2
avahi
Ubuntu:14.04:LTS
From an advisory covering 2 CVEs
 before 0.6.31-4ubuntu1.3, plus listed versions
0.6.31-2ubuntu40.6.31-2ubuntu50.6.31-3ubuntu10.6.31-4ubuntu10.6.31-4ubuntu1.10.6.31-4ubuntu1.2
0.6.31-4ubuntu1.3
avahi
Ubuntu:16.04:LTS
From an advisory covering 2 CVEs
 before 0.6.32~rc+dfsg-1ubuntu2.3, plus listed versions
0.6.31-4ubuntu40.6.32~rc+dfsg-1ubuntu20.6.32~rc+dfsg-1ubuntu2.10.6.32~rc+dfsg-1ubuntu2.2
0.6.32~rc+dfsg-1ubuntu2.3
avahi
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 0.7-3.1ubuntu1.2, plus listed versions
0.6.32-1ubuntu10.7-3ubuntu10.7-3ubuntu20.7-3.1ubuntu10.7-3.1ubuntu1.1
0.7-3.1ubuntu1.2
avahi
openSUSE:Leap 15.0
 before 0.6.32-lp150.4.3.1
0.6.32-lp150.4.3.1
avahi-glib2
openSUSE:Leap 15.0
 before 0.6.32-lp150.4.3.1
0.6.32-lp150.4.3.1
avahi
openSUSE:Tumbleweed
From an advisory covering 8 CVEs
 before 0.8-7.2
0.8-7.2

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-1000845 has been rejected by its source and should not be treated as a live vulnerability, published December 20, 2018. Fixed in avahi 0.7-r2.

References

Show 14 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open