Advisories » MGASA-2019-0081

Updated avahi packages fix security vulnerability

Publication date: 14 Feb 2019
Modification date: 14 Feb 2019
Type: security
Affected Mageia releases : 6
CVE: CVE-2017-6519

Description

It was found that avahi responds to unicast queries coming from outside of
local network which may cause an information leak, such as disclosing the
device type/model that responds to the request or the operating system.
The mDNS response may also be used to amplify denial of service attacks
against other networks as the response size is greater than the size of
request (CVE-2017-6519).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=24251
• https://bugzilla.redhat.com/show_bug.cgi?id=1426712
• https://usn.ubuntu.com/3876-1/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6519

SRPMS

6/core

• avahi-0.6.32-1.1.mga6