[ GLSA 201201-05 ] mDNSResponder: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: mDNSResponder: Multiple vulnerabilities (GLSA 201201-05)
Severity: high
Exploitable: local, remote
Date: January 22, 2012
Bug(s): #290822
ID: 201201-05

Synopsis

Multiple vulnerabilities have been found in mDNSResponder, which
could lead to execution of arbitrary code with root privileges.


Background

mDNSResponder is a component of Apple's Bonjour, an initiative for
zero-configuration networking.


Affected Packages

Package: net-misc/mDNSResponder
Vulnerable: < 212.1
Unaffected: >= 212.1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in mDNSResponder. Please
review the CVE identifiers referenced below for details.


Impact

A local or remote attacker may be able to execute arbitrary code with
root privileges or cause a Denial of Service.


Workaround

There is no known workaround at this time.

Resolution

All mDNSResponder users should upgrade to the latest version: