A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade avahi-glib-develUpgrade avahi-develUpgrade avahi-glibUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-howl-develUpgrade avahi-libsUpgrade avahi-compat-howlUpgrade avahiUpgrade avahi-tools | Nov 16, 2023 | May 7, 2021 |
| Alpine Linux | — | Upgrade avahi | Aug 22, 2024 | May 7, 2021 |
| Centos_linux | — | Upgrade avahi-ui-tools-debuginfoUpgrade avahi-debugsourceUpgrade avahi-dnsconfd-debuginfoUpgrade avahiUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-autoipd-debuginfoUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-toolsUpgrade avahi-glib-debuginfoUpgrade avahi-tools-debuginfoUpgrade avahi-libs-debuginfoUpgrade avahi-glibUpgrade avahi-libsUpgrade avahi-ui-debuginfoUpgrade avahi-gobject-debuginfoUpgrade avahi-compat-howl-debuginfoUpgrade avahi-debuginfo | Nov 8, 2023 | May 7, 2021 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | May 7, 2021 |
| Oracle_linux | — | Upgrade avahi-compat-howlUpgrade avahi-glib-develUpgrade avahi-toolsUpgrade avahi-compat-libdns_sd-develUpgrade avahi-libsUpgrade avahi-develUpgrade avahi-compat-libdns_sdUpgrade avahi-glibUpgrade avahiUpgrade avahi-compat-howl-devel | Nov 16, 2023 | Mar 29, 2021 |
| Redhat_linux | — | Upgrade avahi-develUpgrade avahi-glib-debuginfoUpgrade avahi-glib-develUpgrade avahi-libs-debuginfoUpgrade avahi-compat-libdns_sd-develUpgrade avahi-ui-debuginfoUpgrade avahi-autoipd-debuginfoUpgrade avahi-compat-howlUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-howl-debuginfoUpgrade avahi-libsUpgrade avahiUpgrade avahi-tools-debuginfoUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-compat-howl-develUpgrade avahi-glibUpgrade avahi-ui-tools-debuginfoUpgrade avahi-debugsourceUpgrade avahi-toolsUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-gobject-debuginfoUpgrade avahi-debuginfo | Nov 8, 2023 | May 7, 2021 |
| Suse | — | Upgrade libavahi-core7Upgrade libdns_sdUpgrade libavahi-glib-develUpgrade libavahi-glib1Upgrade libavahi-libevent1Upgrade avahi-utilsUpgrade libavahi-gobject0Upgrade libavahi-develUpgrade libhowl0Upgrade avahi-langUpgrade avahi-autoipdUpgrade libavahi-client3Upgrade libavahi-common3Upgrade libavahi-common3-32bitUpgrade avahi-compat-howl-develUpgrade avahi-utils-gtkUpgrade libavahi-ui-gtk3-0Upgrade libavahi-client3-32bitUpgrade avahi-compat-mDNSResponder-develUpgrade typelib-1_0-Avahi-0_6Upgrade libavahi-gobject-develUpgrade avahi | Oct 26, 2022 | May 7, 2021 |
| Ubuntu | — | Upgrade avahi-daemonUpgrade libavahi-core7 | Jul 8, 2021 | May 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub