CVEs-PoC/2011/CVE-2011-1002.md

CVE-2011-1002

Description

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/DButter/whitehat_public
• https://github.com/EvgeniyaBalanyuk/attacks
• https://github.com/Howertx/avahi-dos
• https://github.com/NikolayAntipov/DB_13-01
• https://github.com/berradiginamic/32123BC7-Securite-Informatique
• https://github.com/csk/unisecbarber
• https://github.com/kaanyeniyol/python-nmap
• https://github.com/lucasljk1/NMAP
• https://github.com/namhikelo/Symfonos1-Vulnhub-CEH
• https://github.com/odolezal/D-Link-DIR-655
• https://github.com/oscaar90/nmap-scan
• https://github.com/polarbeargo/Security-Engineer-Nanodegree-Program-Adversarial-Resilience-Assessing-Infrastructure-Security