Denial of Service in Avahi Daemon 0.6.23 from Open Source Developer Avahi
CVE-2009-0758
Currently unrated
What is CVE-2009-0758?
The avahi-daemon version 0.6.23 contains a vulnerability in the originates_from_local_legacy_unicast_socket function that fails to properly handle the network byte order of port numbers for incoming multicast packets. This oversight can be exploited by remote attackers who send specially crafted legacy unicast mDNS query packets. Such packets may initiate a multicast packet storm, leading to significant network bandwidth exhaustion and increased CPU consumption, ultimately resulting in a denial of service for legitimate users.