A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade avahi-develUpgrade avahi-glibUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-howlUpgrade avahi-toolsUpgrade avahi-compat-howl-develUpgrade avahi-libsUpgrade avahi | Nov 16, 2023 | May 7, 2021 |
| Alpine Linux | — | Upgrade avahi | Aug 22, 2024 | May 7, 2021 |
| Centos_linux | — | Upgrade avahi-glibUpgrade avahi-glib-debuginfoUpgrade avahi-libs-debuginfoUpgrade avahi-compat-howl-debuginfoUpgrade avahi-gobject-debuginfoUpgrade avahi-toolsUpgrade avahi-tools-debuginfoUpgrade avahi-debuginfoUpgrade avahi-ui-debuginfoUpgrade avahi-libsUpgrade avahiUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-autoipd-debuginfoUpgrade avahi-ui-tools-debuginfoUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-debugsourceUpgrade avahi-ui-gtk3-debuginfo | Nov 8, 2023 | May 7, 2021 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | May 7, 2021 |
| Oracle_linux | — | Upgrade avahi-compat-libdns_sd-develUpgrade avahi-toolsUpgrade avahi-develUpgrade avahi-compat-howlUpgrade avahi-libsUpgrade avahi-glib-develUpgrade avahi-glibUpgrade avahiUpgrade avahi-compat-howl-develUpgrade avahi-compat-libdns_sd | Nov 16, 2023 | Mar 29, 2021 |
| Redhat_linux | — | Upgrade avahi-debugsourceUpgrade avahi-gobject-debuginfoUpgrade avahi-ui-tools-debuginfoUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-glibUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-compat-howl-develUpgrade avahi-debuginfoUpgrade avahi-tools-debuginfoUpgrade avahi-toolsUpgrade avahi-libs-debuginfoUpgrade avahi-autoipd-debuginfoUpgrade avahi-compat-howlUpgrade avahi-glib-debuginfoUpgrade avahi-compat-libdns_sd-develUpgrade avahiUpgrade avahi-ui-debuginfoUpgrade avahi-glib-develUpgrade avahi-compat-howl-debuginfoUpgrade avahi-develUpgrade avahi-libsUpgrade avahi-compat-libdns_sdUpgrade avahi-ui-gtk3-debuginfo | Nov 8, 2023 | May 7, 2021 |
| Suse | — | Upgrade avahiUpgrade libavahi-client3-32bitUpgrade libavahi-ui-gtk3-0Upgrade libavahi-client3Upgrade avahi-compat-howl-develUpgrade libavahi-common3-32bitUpgrade avahi-compat-mDNSResponder-develUpgrade libavahi-common3Upgrade typelib-1_0-Avahi-0_6Upgrade libavahi-gobject-develUpgrade avahi-utils-gtkUpgrade libavahi-develUpgrade avahi-autoipdUpgrade libhowl0Upgrade libavahi-core7Upgrade libavahi-glib1Upgrade avahi-utilsUpgrade libavahi-gobject0Upgrade libavahi-glib-develUpgrade libdns_sdUpgrade avahi-langUpgrade libavahi-libevent1 | Oct 26, 2022 | May 7, 2021 |
| Ubuntu | — | Upgrade libavahi-core7Upgrade avahi-daemon | Jul 8, 2021 | May 7, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub