[Touch-packages] [Bug 1570788] Re: Makes mDNS ddos amplification attack possible

I think this was CVE-2017-6519, which was fixed a long time ago. I am closing this bug, please feel free to open a new bug if you can reproduce with a more recent version of Ubuntu. Thanks! ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-6519 ** Changed in: avahi (Ubuntu)

[Touch-packages] [Bug 1570788] Re: Makes mDNS ddos amplification attack possible

Apparently that wasn't the case, from another host I was able to reproduce it with IPv4 as well. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to avahi in Ubuntu. https://bugs.launchpad.net/bugs/1570788 Title: Makes mDNS ddo

[Touch-packages] [Bug 1570788] Re: Makes mDNS ddos amplification attack possible

I am able to reproduce, but only on IPv6. Passing the -4 flag to dig resulted in connection timed out. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to avahi in Ubuntu. https://bugs.launchpad.net/bugs/1570788 Title: Makes mD

[Touch-packages] [Bug 1570788] Re: Makes mDNS ddos amplification attack possible

Thanks for the report. I was interestingly unable to reproduce this when testing, so I will dig in further and try to determine why. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to avahi in Ubuntu. https://bugs.launchpad.net/