Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:24217
HistoryApr 10, 2020 - 12:49 a.m.

Denial Of Service (DoS)

2020-04-1000:49:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16

EPSS

0.035

Percentile

91.6%

Avahi is vulnerable to Denial Of Service (DoS). Due to the way avahi-daemon processed incoming unicast mDNS messages. if the mDNS reflector were enabled on a system, an attacker on the local network could send a specially-crafted unicast mDNS message to that system, resulting in its avahi-daemon flooding the network with a multicast packet storm, and consuming a large amount of CPU. Note: The mDNS reflector is disabled by default.