The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service (exit) via empty TXT data over D-Bus, which triggers an assert error.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade avahi | Jul 30, 2024 | Jun 22, 2007 |
| Suse | — | Upgrade libdns_sdUpgrade libavahi-core7Upgrade libavahi-client3-x86Upgrade libavahi-qt6-1Upgrade avahi-utilsUpgrade libavahi-glib1Upgrade libavahi-develUpgrade libavahi-gobject-develUpgrade libavahi-gobject0Upgrade avahi-langUpgrade libhowl0Upgrade libdns_sd-x86Upgrade avahiUpgrade python3-avahi-gtkUpgrade typelib-1_0-Avahi-0_6Upgrade libdns_sd-32bitUpgrade libavahi-glib-develUpgrade avahi-compat-mDNSResponder-develUpgrade avahi-compat-howl-develUpgrade libavahi-common3Upgrade python313-avahiUpgrade libavahi-core5Upgrade libavahi-ui-gtk3-0Upgrade libavahi-common3-x86Upgrade avahi-autoipdUpgrade libavahi-client3Upgrade libavahi-qt6-develUpgrade libavahi-common3-32bitUpgrade python-avahiUpgrade libavahi-libevent1Upgrade libavahi-client3-32bitUpgrade avahi-utils-gtk | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade avahi-daemon | Nov 8, 2024 | Jun 22, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub