--- title: 'USN-402-1: Avahi vulnerability | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-402-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-402-1 --- # USN-402-1: Avahi vulnerability Publication date 5 January 2007 Overview Avahi vulnerability Releases [6.10](https://ubuntu.com/security/notices?release=edgy) [6.06](https://ubuntu.com/security/notices?release=dapper) [5.10](https://ubuntu.com/security/notices?release=breezy) --- Open side navigation ## Details A flaw was discovered in Avahi's handling of compressed DNS packets. If a specially crafted reply were received over the network, the Avahi daemon would go into an infinite loop, causing a denial of service. ## Update instructions In general, a standard system upgrade is sufficient to effect the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 6.10 edgy | [avahi-daemon](https://ubuntu.com/security/notices/USN-402-1) –  0.6.13-2ubuntu2.4 | | | | 6.06 dapper | [avahi-daemon](https://ubuntu.com/security/notices/USN-402-1) –  0.6.10-0ubuntu3.4 | | | | 5.10 breezy | [avahi-daemon](https://ubuntu.com/security/notices/USN-402-1) –  0.5.2-1ubuntu1.4 | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References * [CVE-2006-6870](https://ubuntu.com/security/CVE-2006-6870)