CVE-2006-6870

Publication date 31 December 2006

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Description

The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service (infinite loop) via a crafted compressed DNS response with a label that points to itself.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
avahi 7.04 feisty
Not affected
6.10 edgy
Fixed 0.6.13-2ubuntu2.4
6.06 LTS dapper
Fixed 0.6.10-0ubuntu3.4

References

Related Ubuntu Security Notices (USN)

    • USN-402-1
    • Avahi vulnerability
    • 5 January 2007

Other references