Your message dated Wed, 23 Feb 2011 15:02:25 +0000 with message-id <e1psget-0000sj...@franck.debian.org> and subject line Bug#614785: fixed in avahi 0.6.28-4 has caused the Debian Bug report #614785, regarding avahi-daemon uses 100% of cpu when scanned with nmap (DoS possible?) to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 614785: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614785 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: avahi-daemon Version: 0.6.27-2 Tags: security Severity: critical Justification: Introduces possible denial-of-service scenario. Hi, when I scan my server from another machine on the network using nmap, I get this: # nmap -sU -p5353 192.168.2.2 Starting Nmap 5.00 ( http://nmap.org ) at 2011-02-23 13:15 CET Interesting ports on 192.168.2.2: PORT STATE SERVICE 5353/udp open|filtered zeroconf MAC Address: XX:XX:XX:XX:XX:XX (Netgear) Nmap done: 1 IP address (1 host up) scanned in 0.50 seconds # As soon as the scan starts, avahi-daemon on the server starts running amok, top shows this: PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 5535 avahi 20 0 33884 1600 1280 R 100 0.0 2:28.47 avahi-daemon Restarting avahi-daemon is not possible: # /etc/init.d/avahi-daemon restart Restarting Avahi mDNS/DNS-SD Daemon: avahi-daemonFailed to kill daemon: Timer expired . # Simply terminating the process doesn't work either: # ps -Af | grep avahi-daemon avahi 5535 1 87 13:14 ? 00:04:43 avahi-daemon: running [server.local] avahi 5536 5535 0 13:14 ? 00:00:00 avahi-daemon: chroot helper root 5610 5581 0 13:20 pts/2 00:00:00 grep avahi-daemon # kill 5535 # ps -Af | grep avahi-daemon avahi 5535 1 88 13:14 ? 00:05:02 avahi-daemon: running [server.local] avahi 5536 5535 0 13:14 ? 00:00:00 avahi-daemon: chroot helper root 5614 5581 0 13:20 pts/2 00:00:00 grep avahi-daemon # Forcibly killing the process works: # kill -9 5535 # ps -Af | grep avahi-daemon root 5629 5581 0 13:23 pts/2 00:00:00 grep avahi-daemon # I don't know what kind of data nmap sends when scanning for open UDP ports, but it definitely shouldn't cause avahi-daemon to run amok. Please note that I have not changed the Avahi configuration in any way, so you should be able to reproduce this easily. Please tell me if you need any more information! Best regards Alexander Kurtz
signature.asc
Description: This is a digitally signed message part
--- End Message ---
--- Begin Message ---Source: avahi Source-Version: 0.6.28-4 We believe that the bug you reported is fixed in the latest version of avahi, which is due to be installed in the Debian FTP archive: avahi-autoipd_0.6.28-4_i386.deb to main/a/avahi/avahi-autoipd_0.6.28-4_i386.deb avahi-daemon_0.6.28-4_i386.deb to main/a/avahi/avahi-daemon_0.6.28-4_i386.deb avahi-dbg_0.6.28-4_i386.deb to main/a/avahi/avahi-dbg_0.6.28-4_i386.deb avahi-discover_0.6.28-4_all.deb to main/a/avahi/avahi-discover_0.6.28-4_all.deb avahi-dnsconfd_0.6.28-4_i386.deb to main/a/avahi/avahi-dnsconfd_0.6.28-4_i386.deb avahi-ui-utils_0.6.28-4_i386.deb to main/a/avahi/avahi-ui-utils_0.6.28-4_i386.deb avahi-utils_0.6.28-4_i386.deb to main/a/avahi/avahi-utils_0.6.28-4_i386.deb avahi_0.6.28-4.debian.tar.gz to main/a/avahi/avahi_0.6.28-4.debian.tar.gz avahi_0.6.28-4.dsc to main/a/avahi/avahi_0.6.28-4.dsc libavahi-client-dev_0.6.28-4_i386.deb to main/a/avahi/libavahi-client-dev_0.6.28-4_i386.deb libavahi-client3_0.6.28-4_i386.deb to main/a/avahi/libavahi-client3_0.6.28-4_i386.deb libavahi-common-data_0.6.28-4_i386.deb to main/a/avahi/libavahi-common-data_0.6.28-4_i386.deb libavahi-common-dev_0.6.28-4_i386.deb to main/a/avahi/libavahi-common-dev_0.6.28-4_i386.deb libavahi-common3_0.6.28-4_i386.deb to main/a/avahi/libavahi-common3_0.6.28-4_i386.deb libavahi-compat-libdnssd-dev_0.6.28-4_i386.deb to main/a/avahi/libavahi-compat-libdnssd-dev_0.6.28-4_i386.deb libavahi-compat-libdnssd1_0.6.28-4_i386.deb to main/a/avahi/libavahi-compat-libdnssd1_0.6.28-4_i386.deb libavahi-core-dev_0.6.28-4_i386.deb to main/a/avahi/libavahi-core-dev_0.6.28-4_i386.deb libavahi-core7_0.6.28-4_i386.deb to main/a/avahi/libavahi-core7_0.6.28-4_i386.deb libavahi-glib-dev_0.6.28-4_i386.deb to main/a/avahi/libavahi-glib-dev_0.6.28-4_i386.deb libavahi-glib1_0.6.28-4_i386.deb to main/a/avahi/libavahi-glib1_0.6.28-4_i386.deb libavahi-gobject-dev_0.6.28-4_i386.deb to main/a/avahi/libavahi-gobject-dev_0.6.28-4_i386.deb libavahi-gobject0_0.6.28-4_i386.deb to main/a/avahi/libavahi-gobject0_0.6.28-4_i386.deb libavahi-qt3-1_0.6.28-4_i386.deb to main/a/avahi/libavahi-qt3-1_0.6.28-4_i386.deb libavahi-qt3-dev_0.6.28-4_i386.deb to main/a/avahi/libavahi-qt3-dev_0.6.28-4_i386.deb libavahi-qt4-1_0.6.28-4_i386.deb to main/a/avahi/libavahi-qt4-1_0.6.28-4_i386.deb libavahi-qt4-dev_0.6.28-4_i386.deb to main/a/avahi/libavahi-qt4-dev_0.6.28-4_i386.deb libavahi-ui-dev_0.6.28-4_i386.deb to main/a/avahi/libavahi-ui-dev_0.6.28-4_i386.deb libavahi-ui0_0.6.28-4_i386.deb to main/a/avahi/libavahi-ui0_0.6.28-4_i386.deb python-avahi_0.6.28-4_all.deb to main/a/avahi/python-avahi_0.6.28-4_all.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 614...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Michael Biebl <bi...@debian.org> (supplier of updated avahi package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 23 Feb 2011 15:34:21 +0100 Source: avahi Binary: avahi-daemon avahi-dnsconfd avahi-autoipd python-avahi avahi-utils avahi-discover libavahi-common3 libavahi-common-data libavahi-common-dev libavahi-core7 libavahi-core-dev libavahi-client3 libavahi-client-dev libavahi-glib1 libavahi-glib-dev libavahi-gobject0 libavahi-gobject-dev libavahi-qt3-1 libavahi-qt3-dev libavahi-qt4-1 libavahi-qt4-dev libavahi-compat-libdnssd1 libavahi-compat-libdnssd-dev libavahi-ui0 libavahi-ui-dev avahi-ui-utils avahi-dbg Architecture: source i386 all Version: 0.6.28-4 Distribution: unstable Urgency: high Maintainer: Utopia Maintenance Team <pkg-utopia-maintain...@lists.alioth.debian.org> Changed-By: Michael Biebl <bi...@debian.org> Description: avahi-autoipd - Avahi IPv4LL network address configuration daemon avahi-daemon - Avahi mDNS/DNS-SD daemon avahi-dbg - Avahi - debugging symbols avahi-discover - Service discover user interface for avahi avahi-dnsconfd - Avahi DNS configuration tool avahi-ui-utils - Avahi GTK+ utilities avahi-utils - Avahi browsing, publishing and discovery utilities libavahi-client-dev - Development files for the Avahi client library libavahi-client3 - Avahi client library libavahi-common-data - Avahi common data files libavahi-common-dev - Development files for the Avahi common library libavahi-common3 - Avahi common library libavahi-compat-libdnssd-dev - Development headers for the Avahi Apple Bonjour compatibility lib libavahi-compat-libdnssd1 - Avahi Apple Bonjour compatibility library libavahi-core-dev - Development files for Avahi's embeddable mDNS/DNS-SD library libavahi-core7 - Avahi's embeddable mDNS/DNS-SD library libavahi-glib-dev - Development headers for the Avahi glib integration library libavahi-glib1 - Avahi glib integration library libavahi-gobject-dev - Development headers for the Avahi GObject library libavahi-gobject0 - Avahi GObject library libavahi-qt3-1 - Avahi Qt 3 integration library libavahi-qt3-dev - Development headers for the Avahi Qt 3 integration library libavahi-qt4-1 - Avahi Qt 4 integration library libavahi-qt4-dev - Development headers for the Avahi Qt 4 integration library libavahi-ui-dev - Development headers for the Avahi GTK+ User interface library libavahi-ui0 - Avahi GTK+ User interface library python-avahi - Python utility package for Avahi Closes: 614785 Changes: avahi (0.6.28-4) unstable; urgency=high . * Bump debhelper compatibility level to 8 and update build dependency on debhelper accordingly. * debian/patches/03_read_null_udp_packets.patch - Read NULL UDP packets else we end up in an infinite loop using 100% CPU and DoS of Avahi. (Closes: #614785, Fixes: CVE-2011-1002) * Urgency high for the security fix. Checksums-Sha1: d4ec91c5f3484cf008450f3f2b80cf8c98cd1cdc 2800 avahi_0.6.28-4.dsc 5f9c6dccdb7f01a9e6d59125c9bb6386b78b694d 33822 avahi_0.6.28-4.debian.tar.gz 69767a9b0c51c8ed181981b0b4499702bcd06bf7 92406 avahi-daemon_0.6.28-4_i386.deb 8cb96d62e903574fe84b36d511e7314ce3f4dd9b 42054 avahi-dnsconfd_0.6.28-4_i386.deb 674dd27ba622ca09e10073d98a0e31c720a880b5 51944 avahi-autoipd_0.6.28-4_i386.deb a6def82e89d6c1256ce4ed6360b5f627c29dab77 35770 python-avahi_0.6.28-4_all.deb 60f891afb2942a1996b0f56e026a999f15587099 53978 avahi-utils_0.6.28-4_i386.deb 699356146f0723321e1e30c49c5cff71a19f505f 37848 avahi-discover_0.6.28-4_all.deb 83c6a1b44d763835274df3333c11a2e5ddff57cd 51304 libavahi-common3_0.6.28-4_i386.deb a1ba6d91feee78b6ac49a463594f8fc5bd395321 134224 libavahi-common-data_0.6.28-4_i386.deb 4f490e2035772009831e8469f03eadf9fdf8e41c 68028 libavahi-common-dev_0.6.28-4_i386.deb 4f7033aa4d4ac3021f01a4cf537cdf58ffc55924 118920 libavahi-core7_0.6.28-4_i386.deb 666e9215ed82ca9cc0601a86d5a3241a1fbaa75d 143486 libavahi-core-dev_0.6.28-4_i386.deb 79c6ac724df882324530f18e958e5f6cc1b9bc33 55126 libavahi-client3_0.6.28-4_i386.deb 2e87f581b07a14a0eb5b62781e4a68553d79af5f 61700 libavahi-client-dev_0.6.28-4_i386.deb e6305f67d58689e6af6aaba5aa241370b84a1807 35522 libavahi-glib1_0.6.28-4_i386.deb a5115f1e98b10cc0d1f442f2e947c56f650d107e 35696 libavahi-glib-dev_0.6.28-4_i386.deb 608c9daa49e127b8d1cff9721e09a28b5a4b5ad7 45458 libavahi-gobject0_0.6.28-4_i386.deb 6c8402e8971f677b74bd76e06aa72d11a9b3abda 50234 libavahi-gobject-dev_0.6.28-4_i386.deb 79d152157f74a59108cde79948672b13f9835484 37180 libavahi-qt3-1_0.6.28-4_i386.deb b67af0fdad8ee688b3eff69fa6f9fd6bca1f32a5 37680 libavahi-qt3-dev_0.6.28-4_i386.deb b0cf12c1b60d2665cdc44c1334a2e64bbafbf954 35630 libavahi-qt4-1_0.6.28-4_i386.deb 3b17a3b0d3223df116b8b5d13d0bdb1fd60e376e 35700 libavahi-qt4-dev_0.6.28-4_i386.deb 2a8a01f3b60feaf6ca136ff39df1b06caedce5d5 44358 libavahi-compat-libdnssd1_0.6.28-4_i386.deb 96362c0e570bddc16bdab6c2c433494600e2d283 62538 libavahi-compat-libdnssd-dev_0.6.28-4_i386.deb 734c5742c46a2169eea4f8b81e29844260ef8244 49302 libavahi-ui0_0.6.28-4_i386.deb a00f1e94b3c193f0b71bffd6bb23b8fe9917a3de 48510 libavahi-ui-dev_0.6.28-4_i386.deb 46aaf097d6d89150ac5c61d74c1474c2f6758b51 38696 avahi-ui-utils_0.6.28-4_i386.deb 5efa4ef10bea399ed35618ff243f6e8506c3f149 622772 avahi-dbg_0.6.28-4_i386.deb Checksums-Sha256: 45cd9700994d97202cd6305c74c38547f20d62239334246ae1bef78875ba5c07 2800 avahi_0.6.28-4.dsc a9cbad691a22b0a15e10fdc3ae65c5b22d08acc23ed9df129ec58d7017d3b3e6 33822 avahi_0.6.28-4.debian.tar.gz 899bed044099585c229f1de81f8263c4777687d3753ca41a957e8d32297b7d26 92406 avahi-daemon_0.6.28-4_i386.deb 151aff7069902fe229c521a851a035453ca0b7d70115933f75583ffeea6b2810 42054 avahi-dnsconfd_0.6.28-4_i386.deb 5563dc4498903464c666bf5cde33e2171626ec809456bcbdcefb1bcec7215f5b 51944 avahi-autoipd_0.6.28-4_i386.deb 054c51ae631724525ee05d810bbb9743314e7021f8a1119afbfbbc5d1467650d 35770 python-avahi_0.6.28-4_all.deb 61b6ee6021d2748ba083da255e45d449551d8567656de7f1ce007b6ff56967d8 53978 avahi-utils_0.6.28-4_i386.deb 2afea381547720bba11fb6070dfa0fc040eeea9d4b39917a200e8ae89b48f56d 37848 avahi-discover_0.6.28-4_all.deb 2d526b2e0cde420545641e07a0ac83db6c0180f81ca42cff6271a02047bce99e 51304 libavahi-common3_0.6.28-4_i386.deb b7bd91609651fb43b0d2454898c47423a30a5a66f82862e2cfdd442214a43c09 134224 libavahi-common-data_0.6.28-4_i386.deb 1401c455bdc6ac158c9b06129c58d39f31fd5cdbe9a76478dd0bb212e40a5dc4 68028 libavahi-common-dev_0.6.28-4_i386.deb b7538fb87a5d58176b32e2286fdc284e1af4ddc5f8434cc80fe8a13a06a73e4c 118920 libavahi-core7_0.6.28-4_i386.deb a703030d1d888843bd5ba147ef0a0498ab0b5a55821a2da08101a7d3ab83a3ff 143486 libavahi-core-dev_0.6.28-4_i386.deb aa9062a77deb25cb87b33326551f20489f9ccad7587e3cecde72b7d84e9ed1af 55126 libavahi-client3_0.6.28-4_i386.deb 72ae8a2e8c5cab10f42fce08a66b1e7f2fd47478e6376464c96531ee43a88b57 61700 libavahi-client-dev_0.6.28-4_i386.deb b5f1d7e670504d51264a657800fee172b4b8cfdec478de0c70cce7fef95a4ac0 35522 libavahi-glib1_0.6.28-4_i386.deb d07b36a1d6768b2556cd2a070589b612d2357e499b794d28d9308200108cf85f 35696 libavahi-glib-dev_0.6.28-4_i386.deb 3807d7e4864ea4d08cc83fedb9e856280b5731b4850194062fe23f3d37747bfb 45458 libavahi-gobject0_0.6.28-4_i386.deb 22807cf22047cc4698386785730054b1ba96365a4723268ff61d87bdea457531 50234 libavahi-gobject-dev_0.6.28-4_i386.deb 1cabad8142b07bbaaa12f838331e1f1840534e00db1ec4160f5ea7ec88e3b2b7 37180 libavahi-qt3-1_0.6.28-4_i386.deb 01b0cc9617fac422a50cdcb1db2dd4af4c11cd3fdc10f07658ace0a08d67821a 37680 libavahi-qt3-dev_0.6.28-4_i386.deb 2ce050b67046bdb3bb2137f483298be0be6513aff1bec1b23687bf650ca0a73f 35630 libavahi-qt4-1_0.6.28-4_i386.deb e62d22874768dba41f765b5982d4ddf4eaf66493cb19b413e57eabb0b6ace8bc 35700 libavahi-qt4-dev_0.6.28-4_i386.deb 1a59838b0cdd1b564a78134a798e305e4cfb8b57d249df697d9f5f76a50c898e 44358 libavahi-compat-libdnssd1_0.6.28-4_i386.deb 72a6b6cf9d07e6ea83966fd91815e48ae6f6af4eab49ba8bfc3aa57e13fef817 62538 libavahi-compat-libdnssd-dev_0.6.28-4_i386.deb 78d82585b99f01fe8b4312bd9ed506947caa1b85fda3bd8a788c22626f459da2 49302 libavahi-ui0_0.6.28-4_i386.deb 9682eac0f0e25b73a40e69d526559657b23d72811153d7b64e59b372c023ca0b 48510 libavahi-ui-dev_0.6.28-4_i386.deb 6594e5d98c8b7510062d2975e19cfb1d9651bd65d8f0279dbe4ecbffa03e4f88 38696 avahi-ui-utils_0.6.28-4_i386.deb 84dfc6cdbeacf31b526e11e2466ba836cbd9201f71ad7e26a16e47451664bae7 622772 avahi-dbg_0.6.28-4_i386.deb Files: 3430cb5d178db20c9847d4ffa1dbd6a5 2800 net optional avahi_0.6.28-4.dsc 1a61329f942b39353b4249c5e6574dfb 33822 net optional avahi_0.6.28-4.debian.tar.gz b85074d8e279807f1024c3e67022ab53 92406 net optional avahi-daemon_0.6.28-4_i386.deb ad25ea34c50a875195ca9e6bc3af0d97 42054 net optional avahi-dnsconfd_0.6.28-4_i386.deb f625945a4f72602e31d37815f113dfaf 51944 net optional avahi-autoipd_0.6.28-4_i386.deb b67cf51f9d990938b3455c4b0835e916 35770 python optional python-avahi_0.6.28-4_all.deb 655e15b793574bcb29c8f88ddbd61d94 53978 net optional avahi-utils_0.6.28-4_i386.deb b5a7150d83cce221e1cd00ed6264528f 37848 net optional avahi-discover_0.6.28-4_all.deb cada6355f526ffe00482059e27d83df1 51304 libs optional libavahi-common3_0.6.28-4_i386.deb 31db06cebe5e524dfeef0651244dfe57 134224 libs optional libavahi-common-data_0.6.28-4_i386.deb 70be3c09b51324abac3cbbeee447ca73 68028 libdevel optional libavahi-common-dev_0.6.28-4_i386.deb c4e880fe65751439e28330845756b0ac 118920 libs optional libavahi-core7_0.6.28-4_i386.deb 22df53ba1a5e3dcbc51851cd4d16b3cf 143486 libdevel optional libavahi-core-dev_0.6.28-4_i386.deb 609d572e0513b0228aa47ed89deda2f7 55126 libs optional libavahi-client3_0.6.28-4_i386.deb f45934c440d4e44cd1b0dc8433bfbb84 61700 libdevel optional libavahi-client-dev_0.6.28-4_i386.deb 4bf4107e096f1c2c5f0b54a6f3a7c113 35522 libs optional libavahi-glib1_0.6.28-4_i386.deb ad2a1eb145f4c18c88ecf46106def9c7 35696 libdevel optional libavahi-glib-dev_0.6.28-4_i386.deb 42633b58e53f9e6f83e4fda451ef2dc2 45458 libs optional libavahi-gobject0_0.6.28-4_i386.deb 691c909d6a00601fb70cb5379e936996 50234 libdevel optional libavahi-gobject-dev_0.6.28-4_i386.deb 0e1c484feadc46df998834e850173344 37180 libs optional libavahi-qt3-1_0.6.28-4_i386.deb d9f1c04c2858be6fc95b7170117902ff 37680 libdevel optional libavahi-qt3-dev_0.6.28-4_i386.deb f073af055cf6a80e766f640464971b09 35630 libs optional libavahi-qt4-1_0.6.28-4_i386.deb 194f39ed3f14244c6c46f246ef42f5d1 35700 libdevel optional libavahi-qt4-dev_0.6.28-4_i386.deb 1b1f313d8478d86c9607491e294262cf 44358 libs optional libavahi-compat-libdnssd1_0.6.28-4_i386.deb 7a701fbe1aa6974f5188b715aaac3076 62538 libdevel optional libavahi-compat-libdnssd-dev_0.6.28-4_i386.deb a691e1f7101ff691aaac312c4ba784e7 49302 libs optional libavahi-ui0_0.6.28-4_i386.deb 08b9dbaccac28b0a52829c7c49ba6f4b 48510 libdevel optional libavahi-ui-dev_0.6.28-4_i386.deb 3ce4b14fee516ba94d765b6561a57eae 38696 utils optional avahi-ui-utils_0.6.28-4_i386.deb ad45ded96a0c6472ca848fc11a53902b 622772 debug extra avahi-dbg_0.6.28-4_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBCAAGBQJNZR2BAAoJEGrh3w1gjyLctOQP/16AyeHrOk7HGAxz2f2l3Sai Y+ifqiUbSq9RH7cu8IE85P1BbFN6Y+svFBUxAfKdRxnPsjQUb9DMSGNMTOrCzr2T JIEEHrL8vCS05lHkKle/Lj6P8GqSJtz7RV6f5MKmkd/96+F+HBm/x6bGF0vfOtTF iunWZ96b427IySpuFdjM8PWPlWP/H2G5G1FD5NyDEcj9pt3abxr/Ybsatql5BL4A PWxlaWBQHPWzPMhPfVjVD6RvD6iVfVfUyRBFHLDrBLudE+IER8Hw/LafsCp378Lo +lJPQ2lyBVj+j9rm8CIi+KNdwcA3WlzAAW+3C4xvMtnjqqxWM9pNcsSTjA4vPsMo nzzdGb8CE1b6kl3F527sP2BGY5FXPBt+cTyy4q8kf2WA7FVdZjCXILP4Gn2Fdwny Sqjtyp//buJJ5ncAjuS2eL4aDxsLFu78kjsfQvi1jlbs8X7hVUz2W+vuPxl7+o2T R0aGGDYes5d/cKf/AP69C6S1UEFQXZwKwTNv0GaUqJDY2d17GI4OaYJc3Gd4DdEg bxWmSDfibnSMsf9nutSacy7aqFfMuHacQOuHrVqrDFC/6cj2li+lRMzFs6ax3tSP 1AqZqEEFu8a/vloSAHmw4KJ/KiGVz5sMOPrtRN4fCwiaioJDUCrMYT9Z9msR/ixo vOCmhu1Z9+d+acTHUwt9 =Za6P -----END PGP SIGNATURE-----
--- End Message ---
