CVE-2009-0758

CVE-2009-0758 describes a denial-of-service vulnerability in avahi-daemon versions 0.6.23 and earlier, specifically within the originates_from_local_legacy_unicast_socket function. This flaw allows remote attackers to trigger a multicast packet storm, leading to significant network bandwidth and CPU consumption, by sending a specially crafted legacy unicast mDNS query packet that exploits incorrect handling of network byte order for port numbers. With a CVSS score of 7.8 (High), this vulnerability is easily exploitable over the network with low attack complexity and no authentication required, resulting in a complete loss of availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.