Oval Definition:oval:com.redhat.rhsa:def:20100528
Revision Date:2010-07-13Version:645
Title:RHSA-2010:0528: avahi security update (Moderate)
Description:Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print to, and find shared files on other computers.

  • A flaw was found in the way the Avahi daemon (avahi-daemon) processed Multicast DNS (mDNS) packets with corrupted checksums. An attacker on the local network could use this flaw to cause avahi-daemon on a target system to exit unexpectedly via specially-crafted mDNS packets. (CVE-2010-2244)

  • A flaw was found in the way avahi-daemon processed incoming unicast mDNS messages. If the mDNS reflector were enabled on a system, an attacker on the local network could send a specially-crafted unicast mDNS message to that system, resulting in its avahi-daemon flooding the network with a multicast packet storm, and consuming a large amount of CPU. Note: The mDNS reflector is disabled by default. (CVE-2009-0758)

    All users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the update, avahi-daemon will be restarted automatically.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2009-0758
    CVE-2010-2244
    RHSA-2010:0528
    RHSA-2010:0528-01
    RHSA-2010:0528-01
    Platform(s):Red Hat Enterprise Linux 5
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • avahi is earlier than 0:0.6.16-9.el5_5
  • AND avahi is signed with Red Hat redhatrelease2 key
  • avahi-compat-howl is earlier than 0:0.6.16-9.el5_5
  • AND avahi-compat-howl is signed with Red Hat redhatrelease2 key
  • avahi-compat-howl-devel is earlier than 0:0.6.16-9.el5_5
  • AND avahi-compat-howl-devel is signed with Red Hat redhatrelease2 key
  • avahi-compat-libdns_sd is earlier than 0:0.6.16-9.el5_5
  • AND avahi-compat-libdns_sd is signed with Red Hat redhatrelease2 key
  • avahi-compat-libdns_sd-devel is earlier than 0:0.6.16-9.el5_5
  • AND avahi-compat-libdns_sd-devel is signed with Red Hat redhatrelease2 key
  • avahi-devel is earlier than 0:0.6.16-9.el5_5
  • AND avahi-devel is signed with Red Hat redhatrelease2 key
  • avahi-glib is earlier than 0:0.6.16-9.el5_5
  • AND avahi-glib is signed with Red Hat redhatrelease2 key
  • avahi-glib-devel is earlier than 0:0.6.16-9.el5_5
  • AND avahi-glib-devel is signed with Red Hat redhatrelease2 key
  • avahi-qt3 is earlier than 0:0.6.16-9.el5_5
  • AND avahi-qt3 is signed with Red Hat redhatrelease2 key
  • avahi-qt3-devel is earlier than 0:0.6.16-9.el5_5
  • AND avahi-qt3-devel is signed with Red Hat redhatrelease2 key
  • avahi-tools is earlier than 0:0.6.16-9.el5_5
  • AND avahi-tools is signed with Red Hat redhatrelease2 key
  • BACK