Re: avahi-daemon uses 100% of cpu when scanned with nmap (DoS possible?)

To: debian-security@lists.debian.org
Subject: Re: avahi-daemon uses 100% of cpu when scanned with nmap (DoS possible?)
From: "Julien Reveret" <shaddai@c0a8.org>
Date: Thu, 24 Feb 2011 15:31:33 -0000
Message-id: <[🔎] 04cad33b021e7c91a76da3404fb76f3f.squirrel@www.c0a8.org>
In-reply-to: <[🔎] 1298464572.5372.26.camel@localhost>
References: <[🔎] 1298464572.5372.26.camel@localhost>

> Package: avahi-daemon
> Version: 0.6.27-2
> Tags: security
> Severity: critical
> Justification: Introduces possible denial-of-service scenario.
>
> Hi,
>
> when I scan my server from another machine on the network using nmap, I
> get this:

[snip]

It seems that mandriva already released an update for avahi :

http://lists.grok.org.uk/pipermail/full-disclosure/2011-February/079525.html

I guess you're facing the same issue.

Regards

Reply to:

Follow-Ups:
- Re: avahi-daemon uses 100% of cpu when scanned with nmap (DoS possible?)
  - From: Yves-Alexis Perez <corsac@debian.org>

References:
- avahi-daemon uses 100% of cpu when scanned with nmap (DoS possible?)
  - From: Alexander Kurtz <kurtz.alex@googlemail.com>

Prev by Date: Re: Bug#614785: Found too in oldstable/lenny?
Next by Date: Re: avahi-daemon uses 100% of cpu when scanned with nmap (DoS possible?)
Previous by thread: Re: avahi-daemon uses 100% of cpu when scanned with nmap (DoS possible?)
Next by thread: Re: avahi-daemon uses 100% of cpu when scanned with nmap (DoS possible?)
Index(es):
- Date
- Thread