Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID: CVE-2017-6519. Reason: This candidate is a duplicate of CVE-2017-6519. Notes: All CVE users should reference CVE-2017-6519 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3876-1 advisory.

  - avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source     addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic     amplification) and may cause information leakage by obtaining potentially sensitive information from the     responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809. (CVE-2017-6519)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for avahi fixes the following issues :

Security issue fixed :

  - CVE-2018-1000845: Fixed DNS amplification and reflection     to spoofed addresses (DOS) (bsc#1120281)

This update was imported from the SUSE:SLE-15:Update update project.

This update for avahi fixes the following issues :

Security issue fixed :

CVE-2018-1000845: Fixed DNS amplification and reflection to spoofed addresses (DOS) (bsc#1120281)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for avahi fixes the following issues :

Security issue fixed :

  - CVE-2018-1000845: Fixed DNS amplification and reflection     to spoofed addresses (DOS) (bsc#1120281)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

ID	Name	Product	Family	Severity
183642	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Avahi vulnerabilities (USN-3876-1)	Nessus	Ubuntu Local Security Checks	critical
122297	openSUSE Security Update : avahi (openSUSE-2019-197)	Nessus	SuSE Local Security Checks	medium
122093	SUSE SLES11 Security Update : avahi (SUSE-SU-2019:13947-1)	Nessus	SuSE Local Security Checks	high
122049	SUSE SLED15 / SLES15 Security Update : avahi (SUSE-SU-2019:0285-1)	Nessus	SuSE Local Security Checks	critical
121588	openSUSE Security Update : avahi (openSUSE-2019-128)	Nessus	SuSE Local Security Checks	medium
121417	SUSE SLED12 / SLES12 Security Update : avahi (SUSE-SU-2019:0179-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2018-1000845

No Score

Tenable Plugins

critical

medium

high

critical

medium

critical