The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service (exit) via empty TXT data over D-Bus, which triggers an assert error.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade avahi | Jul 30, 2024 | Jun 22, 2007 |
| Suse | — | Upgrade libavahi-ui-gtk3-0Upgrade libavahi-core5Upgrade libavahi-client3Upgrade avahi-utils-gtkUpgrade avahi-compat-mDNSResponder-develUpgrade avahi-compat-howl-develUpgrade avahi-autoipdUpgrade typelib-1_0-Avahi-0_6Upgrade python313-avahiUpgrade libavahi-client3-32bitUpgrade python-avahiUpgrade avahiUpgrade libavahi-qt6-develUpgrade libavahi-common3-32bitUpgrade libdns_sd-32bitUpgrade libavahi-common3Upgrade libavahi-libevent1Upgrade python3-avahi-gtkUpgrade libavahi-common3-x86Upgrade libavahi-glib-develUpgrade avahi-utilsUpgrade libavahi-core7Upgrade libavahi-gobject0Upgrade libdns_sdUpgrade libavahi-glib1Upgrade libavahi-client3-x86Upgrade libdns_sd-x86Upgrade libavahi-develUpgrade libhowl0Upgrade libavahi-qt6-1Upgrade avahi-langUpgrade libavahi-gobject-devel | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade avahi-daemon | Nov 8, 2024 | Jun 22, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub