Input validation error in Avahi - CVE-2017-6519

Vulnerability identifier: #VU17349

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-6519

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows remote attackers to perform a denial of service (DoS) attack.

The vulnerability exists due to avahi-daemon inadvertently responds to IPv6 unicast queries with source addresses that are not on-link. A remote attacker can submit specially crafted port-5353 UDP packet to trigger traffic amplification and cause the service to crash.

Avahi
avahi (Alpine package)
avahi (Red Hat package)
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Opensuse
Data Computing Appliance (DCA)
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
App Connect Enterprise Certified Container

Install update from vendor's website.

avahi (Alpine package) - update to 0.6.32-r5
avahi (Red Hat package) - update to 0.6.31-20.el7
Data Computing Appliance (DCA) - update to 4.3.0.0
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.5
App Connect Enterprise Certified Container - addressed in versions 5.0.9, 9.1.0

• https://github.com/lathiat/avahi/issues/203
• https://github.com/lathiat/avahi/issues/203#issuecomment-449536790
• https://www.secfu.net/advisories

• OpenSUSE Linux update for avahi
• Input validation error in avahi (Alpine package)
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• Red Hat Enterprise Linux 7 update for avahi
• Input validation error in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data