Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID: CVE-2017-6519. Reason: This candidate is a duplicate of CVE-2017-6519. Notes: All CVE users should reference CVE-2017-6519 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3876-1 advisory.

    Chad Seaman discovered that Avahi incorrectly handled certain messages. An attacker could possibly use     this issue to cause a denial of service. (CVE-2017-6519, CVE-2018-1000845)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for avahi fixes the following issues :

Security issue fixed :

  - CVE-2018-1000845: Fixed DNS amplification and reflection     to spoofed addresses (DOS) (bsc#1120281)

This update was imported from the SUSE:SLE-15:Update update project.

This update for avahi fixes the following issues :

Security issue fixed :

CVE-2018-1000845: Fixed DNS amplification and reflection to spoofed addresses (DOS) (bsc#1120281)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for avahi fixes the following issues :

Security issue fixed :

  - CVE-2018-1000845: Fixed DNS amplification and reflection     to spoofed addresses (DOS) (bsc#1120281)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

ID	Name	Product	Family	Severity
183642	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Avahi vulnerabilities (USN-3876-1)	Nessus	Ubuntu Local Security Checks	critical
122297	openSUSE Security Update : avahi (openSUSE-2019-197)	Nessus	SuSE Local Security Checks	medium
122093	SUSE SLES11 Security Update : avahi (SUSE-SU-2019:13947-1)	Nessus	SuSE Local Security Checks	high
122049	SUSE SLED15 / SLES15 Security Update : avahi (SUSE-SU-2019:0285-1)	Nessus	SuSE Local Security Checks	critical
121588	openSUSE Security Update : avahi (openSUSE-2019-128)	Nessus	SuSE Local Security Checks	medium
121417	SUSE SLED12 / SLES12 Security Update : avahi (SUSE-SU-2019:0179-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2018-1000845

No Score

Tenable Plugins

critical

medium

high

critical

medium

critical