CVE-2011-1002

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

• CWE-835

• http://avahi.org/ticket/325Broken Link
• http://git.0pointer.de/?p=avahi.git%3Ba=commit%3Bh=46109dfec75534fe270c0ab902576f685d5ab3a6Broken Link
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055858.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.htmlThird Party Advisory
• http://openwall.com/lists/oss-security/2011/02/18/1Mailing List, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/02/18/4Mailing List, Third Party Advisory
• http://osvdb.org/70948Broken Link
• http://secunia.com/advisories/43361Broken Link, Vendor Advisory
• http://secunia.com/advisories/43465Broken Link
• http://secunia.com/advisories/43605Broken Link
• http://secunia.com/advisories/43673Broken Link
• http://secunia.com/advisories/44131Broken Link
• http://ubuntu.com/usn/usn-1084-1Third Party Advisory
• http://www.debian.org/security/2011/dsa-2174Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:037Broken Link
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:040Broken Link
• http://www.openwall.com/lists/oss-security/2011/02/22/9Mailing List, Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0436.htmlBroken Link
• http://www.redhat.com/support/errata/RHSA-2011-0779.htmlBroken Link
• http://www.securityfocus.com/bid/46446Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0448Broken Link, Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0499Broken Link, Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0511Broken Link
• http://www.vupen.com/english/advisories/2011/0565Broken Link
• http://www.vupen.com/english/advisories/2011/0601Broken Link
• http://www.vupen.com/english/advisories/2011/0670Broken Link
• http://www.vupen.com/english/advisories/2011/0969Broken Link
• http://xorl.wordpress.com/2011/02/20/cve-2011-1002-avahi-daemon-remote-denial-of-service/Exploit, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=667187Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65524Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65525Third Party Advisory, VDB Entry
• http://avahi.org/ticket/325Broken Link
• http://git.0pointer.de/?p=avahi.git%3Ba=commit%3Bh=46109dfec75534fe270c0ab902576f685d5ab3a6Broken Link
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055858.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.htmlThird Party Advisory
• http://openwall.com/lists/oss-security/2011/02/18/1Mailing List, Third Party Advisory
• http://openwall.com/lists/oss-security/2011/02/18/4Mailing List, Third Party Advisory
• http://osvdb.org/70948Broken Link
• http://secunia.com/advisories/43361Broken Link, Vendor Advisory
• http://secunia.com/advisories/43465Broken Link
• http://secunia.com/advisories/43605Broken Link
• http://secunia.com/advisories/43673Broken Link
• http://secunia.com/advisories/44131Broken Link
• http://ubuntu.com/usn/usn-1084-1Third Party Advisory
• http://www.debian.org/security/2011/dsa-2174Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:037Broken Link
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:040Broken Link
• http://www.openwall.com/lists/oss-security/2011/02/22/9Mailing List, Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2011-0436.htmlBroken Link
• http://www.redhat.com/support/errata/RHSA-2011-0779.htmlBroken Link
• http://www.securityfocus.com/bid/46446Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0448Broken Link, Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0499Broken Link, Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0511Broken Link
• http://www.vupen.com/english/advisories/2011/0565Broken Link
• http://www.vupen.com/english/advisories/2011/0601Broken Link
• http://www.vupen.com/english/advisories/2011/0670Broken Link
• http://www.vupen.com/english/advisories/2011/0969Broken Link
• http://xorl.wordpress.com/2011/02/20/cve-2011-1002-avahi-daemon-remote-denial-of-service/Exploit, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=667187Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65524Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65525Third Party Advisory, VDB Entry

Published

Feb 22, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-10014GTA San Andreas Multiplayer (SA-MP) server version 0.3.1.1 i…8.7
• CVE-2011-10015Cytel Studio version 9.0 and earlier is vulnerable to a stac…9.3
• CVE-2011-10016Real Networks Netzip Classic version 7.5.1.86 is vulnerable …9.3
• CVE-2011-10017Snort Report versions < 1.3.2 contains a remote command exec…10
• CVE-2011-10018myBB version 1.6.4 was distributed with an unauthorized back…9.8
• CVE-2011-10019Spreecommerce versions prior to 0.60.2 contains a remote com…9.8
• CVE-2011-10020Kaillera Server version 0.86 is vulnerable to a denial-of-se…8.7
• CVE-2011-10021Magix Musik Maker 16 is vulnerable to a stack-based buffer o…8.4
• CVE-2011-10022SPlayer version 3.7 and earlier is vulnerable to a stack-bas…8.6
• CVE-2011-10023MJM QuickPlayer (also known as MJM Player) version 2010 cont…8.4
• CVE-2011-10024MJM Core Player (likely now referred to as MJM Player) 2011 …8.4
• CVE-2011-10025Subtitle Processor 7.7.1 contains a buffer overflow vulnerab…8.5