GLSA-200611-13 : Avahi: 'netlink' message vulnerability

low Nessus Plugin ID 23707

Synopsis

The remote Gentoo host is missing one or more security-related patches.

Description

The remote host is affected by the vulnerability described in GLSA-200611-13 (Avahi: 'netlink' message vulnerability)

Avahi does not check that the netlink messages come from the kernel instead of a user-space process.
Impact :

A local attacker could exploit this vulnerability by crafting malicious netlink messages and trick Avahi to react to fake network changes. This could lead users to connect to untrusted services without knowing.
Workaround :

There is no known workaround at this time.

Solution

All Avahi users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=net-dns/avahi-0.6.15'

Plugin Details

Severity: Low

ID: 23707

File Name: gentoo_GLSA-200611-13.nasl

Version: 1.17

Type: local

Family: Gentoo Local Security Checks

Published: 11/22/2006

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.4

CVSS v2

Risk Factor: Low

Base Score: 2.1

Temporal Score: 1.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Information

CPE: p-cpe:/a:gentoo:linux:avahi, cpe:/o:gentoo:linux

Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list

Exploit Ease: No known exploits are available

Patch Publication Date: 11/20/2006

Vulnerability Publication Date: 11/6/2006

Reference Information

CVE: CVE-2006-5461

BID: 21016

GLSA: 200611-13

Detections

Analytics