Every CVESearch/Get API key

CVE-2011-1002

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a...

5.0 MediumFix available

CVE-2011-1002 is a medium vulnerability (CVSS 5.0) in Avahi, published February 22, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 29.4%, the 98th percentile. Fixed in avahi 0.6.28-4.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
29.4%EPSS, 98th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0.6.28-4avahi +105 more

Description

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

Exploit likelihood

29.4%Up 25.0 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
avahi
Debian:12
before 0.6.28-4
0.6.28-4
avahi
Debian:13
before 0.6.28-4
0.6.28-4
avahi
Debian:14
before 0.6.28-4
0.6.28-4
avahi
Debian:5.0
before 0.6.23-3lenny3, plus listed versions
0.6.23-3lenny10.6.23-3lenny2
0.6.23-3lenny3
avahi
Debian:6.0
before 0.6.27-2+squeeze1, plus listed versions
0.6.27-2
0.6.27-2+squeeze1
avahi
Red Hat:enterprise_linux:5::server
before 0:0.6.16-10.el5_6
0:0.6.16-10.el5_6
avahi-compat-howl
Red Hat:enterprise_linux:5::server
before 0:0.6.16-10.el5_6
0:0.6.16-10.el5_6
avahi-compat-howl-devel
Red Hat:enterprise_linux:5::server
before 0:0.6.16-10.el5_6
0:0.6.16-10.el5_6
avahi-compat-libdns_sd
Red Hat:enterprise_linux:5::server
before 0:0.6.16-10.el5_6
0:0.6.16-10.el5_6
avahi-compat-libdns_sd-devel
Red Hat:enterprise_linux:5::server
before 0:0.6.16-10.el5_6
0:0.6.16-10.el5_6
Show 96 moreShow less
Affected packages
PackageAffectedFixed
avahi-debuginfo
Red Hat:enterprise_linux:5::server
before 0:0.6.16-10.el5_6
0:0.6.16-10.el5_6
avahi-devel
Red Hat:enterprise_linux:5::server
before 0:0.6.16-10.el5_6
0:0.6.16-10.el5_6
avahi-glib
Red Hat:enterprise_linux:5::server
before 0:0.6.16-10.el5_6
0:0.6.16-10.el5_6
avahi-glib-devel
Red Hat:enterprise_linux:5::server
before 0:0.6.16-10.el5_6
0:0.6.16-10.el5_6
avahi-qt3
Red Hat:enterprise_linux:5::server
before 0:0.6.16-10.el5_6
0:0.6.16-10.el5_6
avahi-qt3-devel
Red Hat:enterprise_linux:5::server
before 0:0.6.16-10.el5_6
0:0.6.16-10.el5_6
avahi-tools
Red Hat:enterprise_linux:5::server
before 0:0.6.16-10.el5_6
0:0.6.16-10.el5_6
avahi
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-howl
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-howl-devel
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-libdns_sd
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-libdns_sd-devel
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-debuginfo
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-devel
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-dnsconfd
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-glib-devel
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-gobject
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-gobject-devel
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt3
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt3-devel
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt4
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt4-devel
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-ui
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-ui-devel
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-ui-tools
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-autoipd
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-glib
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-libs
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-tools
Red Hat:enterprise_linux:6::client
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-autoipd
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-howl
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-howl-devel
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-libdns_sd
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-libdns_sd-devel
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-debuginfo
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-devel
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-dnsconfd
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-glib
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-glib-devel
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-gobject
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-gobject-devel
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt3
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt3-devel
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt4
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt4-devel
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-ui
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-ui-devel
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-ui-tools
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-libs
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-tools
Red Hat:enterprise_linux:6::computenode
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-howl
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-howl-devel
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-libdns_sd
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-libdns_sd-devel
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-debuginfo
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-devel
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-dnsconfd
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-glib-devel
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-gobject
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-gobject-devel
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt3
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt3-devel
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt4
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt4-devel
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-ui
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-ui-devel
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-ui-tools
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-autoipd
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-glib
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-libs
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-tools
Red Hat:enterprise_linux:6::server
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-howl
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-howl-devel
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-libdns_sd
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-compat-libdns_sd-devel
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-debuginfo
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-devel
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-dnsconfd
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-glib-devel
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-gobject
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-gobject-devel
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt3
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt3-devel
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt4
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-qt4-devel
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-ui
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-ui-devel
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-ui-tools
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-autoipd
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-glib
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-libs
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi-tools
Red Hat:enterprise_linux:6::workstation
before 0:0.6.25-11.el6
0:0.6.25-11.el6
avahi
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
before 0.6.32-2.3
0.6.32-2.3

What each source reports

NVD Score used5.0

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

Record
CVE-2011-1002
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-835
Updated
2026-11-02
CVE ListNo score

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

Record
CVE-2011-1002
Updated
2026-11-02
EUVDEUVD-2011-1019No score

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

Record
EUVD-2011-1019
Updated
2026-11-03
GitHub AdvisoriesGHSA-mqr3-725g-5qgwNo score

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a...

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

Record
GHSA-mqr3-725g-5qgw
Weakness
CWE-835
Updated
2026-11-02
OSVBELL-CVE-2011-10025.0

CVE-2011-1002 does not affect BellSoft software

Record
BELL-CVE-2011-1002
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSVNo score

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

Record
CVE-2011-1002
Updated
2026-11-02
OSVDEBIAN-CVE-2011-1002No score

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

Record
DEBIAN-CVE-2011-1002
Updated
2026-11-02
OSVopenSUSE-SU-2024:10363-1No score

avahi-0.6.32-2.3 on GA media

These are all security issues fixed in the avahi-0.6.32-2.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10363-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 41 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open