Upstream information

CVE-2007-3372 at MITRE

Description

The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service (exit) via empty TXT data over D-Bus, which triggers an assert error.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 2.1
Vector AV:L/AC:L/Au:N/C:N/I:N/A:P
Access Vector Local
Access Complexity Low
Authentication None
Confidentiality Impact None
Integrity Impact None
Availability Impact Partial
SUSE Bugzilla entry: 287123 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Server 11 SP1
  • avahi >= 0.6.23-11.19.22
  • avahi-lang >= 0.6.23-11.19.22
  • avahi-utils >= 0.6.23-11.19.22
  • libavahi-client3 >= 0.6.23-11.19.22
  • libavahi-client3-32bit >= 0.6.23-11.19.22
  • libavahi-client3-x86 >= 0.6.23-11.19.22
  • libavahi-common3 >= 0.6.23-11.19.22
  • libavahi-common3-32bit >= 0.6.23-11.19.22
  • libavahi-common3-x86 >= 0.6.23-11.19.22
  • libavahi-core5 >= 0.6.23-11.19.22
  • libdns_sd >= 0.6.23-11.19.22
  • libdns_sd-32bit >= 0.6.23-11.19.22
  • libdns_sd-x86 >= 0.6.23-11.19.22
Patchnames:
SUSE Linux Enterprise Server 11 SP1 GA avahi
SUSE Linux Enterprise Server 11 SP2
  • avahi >= 0.6.23-11.19.22
  • avahi-lang >= 0.6.23-11.19.22
  • avahi-utils >= 0.6.23-11.19.22
  • libavahi-client3 >= 0.6.23-11.19.22
  • libavahi-client3-32bit >= 0.6.23-11.19.22
  • libavahi-client3-x86 >= 0.6.23-11.19.22
  • libavahi-common3 >= 0.6.23-11.19.22
  • libavahi-common3-32bit >= 0.6.23-11.19.22
  • libavahi-common3-x86 >= 0.6.23-11.19.22
  • libavahi-core5 >= 0.6.23-11.19.22
  • libdns_sd >= 0.6.23-11.19.22
  • libdns_sd-32bit >= 0.6.23-11.19.22
  • libdns_sd-x86 >= 0.6.23-11.19.22
Patchnames:
SUSE Linux Enterprise Server 11 SP2 GA avahi
SUSE Linux Enterprise Server 11 SP3
  • avahi >= 0.6.23-11.30.4
  • avahi-lang >= 0.6.23-11.30.4
  • avahi-utils >= 0.6.23-11.30.4
  • libavahi-client3 >= 0.6.23-11.30.4
  • libavahi-client3-32bit >= 0.6.23-11.30.4
  • libavahi-client3-x86 >= 0.6.23-11.30.4
  • libavahi-common3 >= 0.6.23-11.30.4
  • libavahi-common3-32bit >= 0.6.23-11.30.4
  • libavahi-common3-x86 >= 0.6.23-11.30.4
  • libavahi-core5 >= 0.6.23-11.30.4
  • libdns_sd >= 0.6.23-11.30.4
  • libdns_sd-32bit >= 0.6.23-11.30.4
  • libdns_sd-x86 >= 0.6.23-11.30.4
Patchnames:
SUSE Linux Enterprise Server 11 SP3 GA avahi
SUSE Linux Enterprise Server 11 SP4
  • avahi >= 0.6.23-11.32.1
  • avahi-lang >= 0.6.23-11.32.1
  • avahi-utils >= 0.6.23-11.32.1
  • libavahi-client3 >= 0.6.23-11.32.1
  • libavahi-client3-32bit >= 0.6.23-11.32.1
  • libavahi-client3-x86 >= 0.6.23-11.32.1
  • libavahi-common3 >= 0.6.23-11.32.1
  • libavahi-common3-32bit >= 0.6.23-11.32.1
  • libavahi-common3-x86 >= 0.6.23-11.32.1
  • libavahi-core5 >= 0.6.23-11.32.1
  • libdns_sd >= 0.6.23-11.32.1
  • libdns_sd-32bit >= 0.6.23-11.32.1
  • libdns_sd-x86 >= 0.6.23-11.32.1
Patchnames:
SUSE Linux Enterprise Server 11 SP4 GA avahi
SUSE Linux Enterprise Software Development Kit 11 SP4
  • avahi-compat-howl-devel >= 0.6.23-11.32.1
  • avahi-compat-mDNSResponder-devel >= 0.6.23-11.32.1
  • libavahi-devel >= 0.6.23-11.32.1
  • libhowl0 >= 0.6.23-11.32.1
  • python-avahi >= 0.6.23-11.32.1
Patchnames:
SUSE Linux Enterprise Software Development Kit 11 SP4 GA avahi-compat-howl-devel
SUSE LINUX 10.1
  • avahi >= 0.6.5-29.16
  • avahi-compat-howl >= 0.6.5-29.16
  • avahi-compat-howl-devel >= 0.6.5-29.16
  • avahi-compat-mDNSResponder >= 0.6.5-29.16
  • avahi-compat-mDNSResponder-devel >= 0.6.5-29.16
  • avahi-devel >= 0.6.5-29.16
  • avahi-glib >= 0.6.5-29.16
  • avahi-mono >= 0.6.5-29.16
  • avahi-qt3 >= 0.6.5-29.16
  • avahi-qt4 >= 0.6.5-29.16