A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade avahi-gobject-develUpgrade avahi-develUpgrade avahi-compat-howl-develUpgrade avahi-uiUpgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-autoipdUpgrade avahi-ui-develUpgrade avahi-gobjectUpgrade python3-avahiUpgrade avahi-libsUpgrade avahi-glibUpgrade avahi-compat-howlUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-libdns_sdUpgrade avahi-glib-develUpgrade avahi-tools | Nov 16, 2023 | Jun 2, 2021 |
| Alpine Linux | — | Upgrade avahi | Mar 26, 2024 | Jun 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade avahi-debuginfoUpgrade avahi-toolsUpgrade avahi-libsUpgrade avahi-ui-develUpgrade avahi-gobject-develUpgrade avahi-compat-libdns_sdUpgrade avahi-gobjectUpgrade avahi-compat-howlUpgrade avahi-qt3-develUpgrade avahi-qt3Upgrade avahi-qt4Upgrade avahi-glibUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-ui-gtk3Upgrade avahi-develUpgrade avahi-uiUpgrade avahi-autoipdUpgrade avahi-qt4-develUpgrade avahi-ui-toolsUpgrade avahi-compat-howl-develUpgrade avahiUpgrade avahi-dnsconfd | Dec 5, 2023 | Jun 2, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 2, 2021 |
| Centos_linux | — | Upgrade avahi-ui-debuginfoUpgrade avahi-gobjectUpgrade avahi-glib-debuginfoUpgrade avahiUpgrade avahi-compat-howl-debuginfoUpgrade avahi-autoipd-debuginfoUpgrade avahi-tools-debuginfoUpgrade avahi-debuginfoUpgrade avahi-libs-debuginfoUpgrade avahi-glibUpgrade avahi-autoipdUpgrade avahi-ui-gtk3Upgrade avahi-ui-tools-debuginfoUpgrade avahi-debugsourceUpgrade avahi-libsUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-toolsUpgrade avahi-gobject-debuginfoUpgrade avahi-ui-gtk3-debuginfoUpgrade python3-avahiUpgrade avahi-compat-libdns_sd-debuginfo | Nov 8, 2023 | Jun 2, 2021 |
| Debian | — | Upgrade avahi | Jun 9, 2022 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-autoipdUpgrade avahiUpgrade avahi-ui-gtk3Upgrade avahi-libs | Sep 16, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-autoipdUpgrade avahi-libs | Sep 29, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade avahiUpgrade avahi-autoipdUpgrade avahi-glibUpgrade avahi-develUpgrade avahi-gobjectUpgrade avahi-libsUpgrade python3-avahiUpgrade python2-avahiUpgrade avahi-ui-gtk3 | Sep 24, 2021 | Jun 2, 2021 |
| Oracle Solaris | — | Upgrade system/network/avahi to version 0.7-11.4.35.0.1.94.2 on Solaris 11.4Upgrade system/network/avahi/gui to version 0.7-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Jun 2, 2021 |
| Oracle_linux | — | Upgrade avahi-autoipdUpgrade avahi-compat-howl-develUpgrade avahi-glib-develUpgrade python3-avahiUpgrade avahi-ui-develUpgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-libsUpgrade avahi-compat-howlUpgrade avahi-compat-libdns_sdUpgrade avahi-glibUpgrade avahi-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-toolsUpgrade avahi-uiUpgrade avahi-gobject-develUpgrade avahi-gobject | Nov 16, 2023 | Mar 10, 2021 |
| Redhat_linux | — | Upgrade avahi-ui-gtk3-debuginfoUpgrade avahi-compat-howlUpgrade avahi-ui-develUpgrade avahi-ui-gtk3Upgrade avahi-compat-howl-develUpgrade avahi-toolsUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-gobject-debuginfoUpgrade avahi-gobjectUpgrade avahi-debuginfoUpgrade avahi-uiUpgrade python3-avahiUpgrade avahi-compat-howl-debuginfoUpgrade avahi-autoipd-debuginfoUpgrade avahi-glibUpgrade avahi-compat-libdns_sdUpgrade avahi-ui-tools-debuginfoUpgrade avahi-glib-debuginfoUpgrade avahi-libs-debuginfoUpgrade avahi-develUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-ui-debuginfoUpgrade avahi-autoipdUpgrade avahi-tools-debuginfoUpgrade avahi-debugsourceNo solution existsUpgrade avahi-gobject-develUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahiUpgrade avahi-libs | Nov 8, 2023 | Jun 2, 2021 |
| Rocky_linux | — | — | Aug 15, 2024 | Jun 2, 2021 |
| Suse | — | Upgrade avahi-autoipdUpgrade libavahi-glib1-32bitUpgrade python3-avahiUpgrade libhowl0Upgrade avahi-utils-gtkUpgrade avahi-compat-mDNSResponder-develUpgrade avahiUpgrade libavahi-client3Upgrade libdns_sd-32bitUpgrade avahi-monoUpgrade libavahi-qt4-develUpgrade libdns_sdUpgrade libavahi-gobject0Upgrade libavahi-common3-32bitUpgrade avahi-compat-howl-develUpgrade libavahi-client3-32bitUpgrade libavahi-ui-gtk3-0Upgrade libavahi-qt4-1Upgrade avahi-utilsUpgrade libavahi-ui0Upgrade libavahi-develUpgrade libavahi-gobject-develUpgrade libavahi-core7Upgrade libavahi-libevent1Upgrade libavahi-glib1Upgrade libavahi-glib-develUpgrade python-avahi-gtkUpgrade libavahi-common3Upgrade python3-avahi-gtkUpgrade python-avahiUpgrade typelib-1_0-Avahi-0_6Upgrade avahi-lang | May 5, 2021 | May 4, 2021 |
| Ubuntu | — | Upgrade libavahi-core7 (Ubuntu Pro)Upgrade libavahi-core7Upgrade avahi-daemonUpgrade avahi-daemon (Ubuntu Pro) | Jul 8, 2021 | May 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub