CVE-2006-6870

{"id": "CVE-2006-6870", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-12-31T05:00:00.000", "references": [{"url": "http://fedoranews.org/cms/node/2362", "source": "security@ubuntu.com"}, {"url": "http://fedoranews.org/cms/node/2408", "source": "security@ubuntu.com"}, {"url": "http://secunia.com/advisories/23628", "source": "security@ubuntu.com"}, {"url": "http://secunia.com/advisories/23644", "source": "security@ubuntu.com"}, {"url": "http://secunia.com/advisories/23660", "source": "security@ubuntu.com"}, {"url": "http://secunia.com/advisories/23673", "source": "security@ubuntu.com"}, {"url": "http://secunia.com/advisories/23782", "source": "security@ubuntu.com"}, {"url": "http://secunia.com/advisories/24995", "source": "security@ubuntu.com"}, {"url": "http://www.avahi.org/#December2006", "tags": ["Patch"], "source": "security@ubuntu.com"}, {"url": "http://www.avahi.org/changeset/1340", "source": "security@ubuntu.com"}, {"url": "http://www.avahi.org/ticket/84", "tags": ["Patch"], "source": "security@ubuntu.com"}, {"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:003", "source": "security@ubuntu.com"}, {"url": "http://www.novell.com/linux/security/advisories/2007_007_suse.html", "source": "security@ubuntu.com"}, {"url": "http://www.securityfocus.com/bid/21881", "source": "security@ubuntu.com"}, {"url": "http://www.ubuntu.com/usn/usn-402-1", "source": "security@ubuntu.com"}, {"url": "http://www.vupen.com/english/advisories/2007/0071", "source": "security@ubuntu.com"}, {"url": "http://fedoranews.org/cms/node/2362", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://fedoranews.org/cms/node/2408", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/23628", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/23644", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/23660", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/23673", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/23782", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/24995", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.avahi.org/#December2006", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.avahi.org/changeset/1340", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.avahi.org/ticket/84", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:003", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.novell.com/linux/security/advisories/2007_007_suse.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/21881", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.ubuntu.com/usn/usn-402-1", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/0071", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service (infinite loop) via a crafted compressed DNS response with a label that points to itself."}, {"lang": "es", "value": "La funci\u00f3n consume_labels en avahi-core/dns.c en Avahi before 0.6.16 permite a un atacante remoto provocar denegaci\u00f3n de servicio (bucle infinito) a trav\u00e9s de respuestas DNS comprimidas manipuladas con una etiqueta que apunta as\u00ed misma."}], "lastModified": "2024-11-21T00:23:50.903", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C0D4625-24B2-4BF7-B32B-7BCC12C8BD1E"}, {"criteria": "cpe:2.3:a:avahi:avahi:0.6.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8266D64B-B067-413E-BDA7-4AB770D4F570"}, {"criteria": "cpe:2.3:a:avahi:avahi:0.6.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F99BF964-2FC8-45B5-AD69-4790179B8AF5"}, {"criteria": "cpe:2.3:a:avahi:avahi:0.6.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9CA79F96-1C98-49BE-8197-D52B8B6DEF24"}, {"criteria": "cpe:2.3:a:avahi:avahi:0.6.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FF6E882-B66D-4B84-AFE7-D96B1B43E65D"}, {"criteria": "cpe:2.3:a:avahi:avahi:0.6.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC5A8266-1859-45EB-9F16-BF0A5DE1A651"}, {"criteria": "cpe:2.3:a:avahi:avahi:0.6.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DC2000C5-238B-43EF-B374-E7505CC61B29"}, {"criteria": "cpe:2.3:a:avahi:avahi:0.6.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9BAC2B1B-C800-410D-8484-569675FFD484"}, {"criteria": "cpe:2.3:a:avahi:avahi:0.6.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD6F264D-6E78-4E57-96F7-C8B86BDFBD95"}], "operator": "OR"}]}], "sourceIdentifier": "security@ubuntu.com", "evaluatorSolution": "This vulnerability is addressed in the following product release:\r\nAvahi, Avahi, 0.6.16"}