Mageia 6: MGASA-2019-0081 Moderate: Avahi Information Leak and DoS
mageia
February 14, 2019
It was found that avahi responds to unicast queries coming from outside of local network which may cause an information leak, such as disclosing the device type/model that responds...
Summary
It was found that avahi responds to unicast queries coming from outside of
local network which may cause an information leak, such as disclosing the
device type/model that responds to the request or the operating system.
The mDNS response may also be used to amplify denial of service attacks
against other networks as the response size is greater than the size of
request (CVE-2017-6519).
References
- https://bugs.mageia.org/show_bug.cgi?id=24251
- https://bugzilla.redhat.com/show_bug.cgi?id=1426712
- https://ubuntu.com/security/notices/USN-3876-1
- https://www.cve.org/CVERecord?id=CVE-2017-6519
Topics Covered
Resolution
SRPMS
- 6/core/avahi-0.6.32-1.1.mga6
PREVIOUS
NEXT
Publication date: 14 Feb 2019
URL: https://advisories.mageia.org/MGASA-2019-0081.html
Type: security
CVE: CVE-2017-6519
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!