tocsin

Alpine/avahi: medium 5.3

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Action: Upgrade avahi to 0.8-r21 or later.

Affected

introducedfixedlast affected
00.8-r21-

Fixed versions

0.8-r21

Sources

published · modified · JSON