Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade avahi | Jul 30, 2024 | Nov 14, 2006 |
| Gentoo Linux | — | Upgrade net-dns/avahi. | Oct 30, 2017 | Nov 14, 2006 |
| Suse | — | Upgrade libavahi-gobject-develUpgrade avahi-autoipdUpgrade libavahi-common3-32bitUpgrade libhowl0Upgrade libavahi-client3-x86Upgrade python313-avahiUpgrade libavahi-develUpgrade libdns_sd-x86Upgrade libavahi-common3Upgrade libdns_sdUpgrade libavahi-gobject0Upgrade avahi-compat-howl-develUpgrade avahi-langUpgrade avahi-utilsUpgrade avahi-utils-gtkUpgrade avahiUpgrade libavahi-core5Upgrade libavahi-client3-32bitUpgrade libavahi-glib1Upgrade libavahi-core7Upgrade libavahi-libevent1Upgrade python3-avahi-gtkUpgrade libavahi-client3Upgrade avahi-compat-mDNSResponder-develUpgrade typelib-1_0-Avahi-0_6Upgrade libavahi-common3-x86Upgrade libdns_sd-32bitUpgrade libavahi-glib-develUpgrade libavahi-ui-gtk3-0Upgrade python-avahi | Aug 9, 2024 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libavahi-core4Upgrade libavahi-core1Upgrade avahi-daemon | Nov 8, 2024 | Nov 14, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub