USN-1084-1: avahi vulnerability
7 March 2011
An attacker could send crafted input to Avahi and cause it to hang.
Releases
Packages
- avahi - Avahi IPv4LL network address configuration daemon
Details
It was discovered that Avahi incorrectly handled empty UDP packets. A
remote attacker could send a specially-crafted packet and cause Avahi to
hang, resulting in a denial of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 9.10
Ubuntu 8.04
Ubuntu 10.10
Ubuntu 10.04
After a standard system update you need to reboot your computer to make
all the necessary changes.