A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade avahi-ui-gtk3Upgrade avahi-develUpgrade avahi-compat-howl-develUpgrade avahi-uiUpgrade avahiUpgrade avahi-gobject-develUpgrade avahi-compat-howlUpgrade avahi-compat-libdns_sdUpgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahi-ui-develUpgrade avahi-glibUpgrade avahi-toolsUpgrade avahi-glib-develUpgrade avahi-libsUpgrade python3-avahiUpgrade avahi-compat-libdns_sd-devel | Nov 16, 2023 | Jun 2, 2021 |
| Alpine Linux | — | Upgrade avahi | Mar 26, 2024 | Jun 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade avahi-gobject-develUpgrade avahi-compat-howlUpgrade avahi-compat-libdns_sdUpgrade avahi-glib-develUpgrade avahi-glibUpgrade avahi-gobjectUpgrade avahi-qt3-develUpgrade avahi-ui-develUpgrade avahi-debuginfoUpgrade avahi-libsUpgrade avahi-qt4Upgrade avahi-toolsUpgrade avahi-qt3Upgrade avahi-compat-howl-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-dnsconfdUpgrade avahi-develUpgrade avahi-uiUpgrade avahi-autoipdUpgrade avahi-ui-gtk3Upgrade avahi-ui-toolsUpgrade avahiUpgrade avahi-qt4-devel | Dec 5, 2023 | Jun 2, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 2, 2021 |
| Centos_linux | — | Upgrade avahi-compat-howl-debuginfoUpgrade avahi-debuginfoUpgrade avahi-libs-debuginfoUpgrade avahi-ui-debuginfoUpgrade avahi-autoipdUpgrade avahiUpgrade avahi-autoipd-debuginfoUpgrade avahi-glib-debuginfoUpgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-tools-debuginfoUpgrade avahi-debugsourceUpgrade python3-avahiUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-ui-gtk3Upgrade avahi-libsUpgrade avahi-gobject-debuginfoUpgrade avahi-ui-tools-debuginfoUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-toolsUpgrade avahi-ui-gtk3-debuginfo | Nov 8, 2023 | Jun 2, 2021 |
| Debian | — | Upgrade avahi | Jun 9, 2022 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade avahi-libsUpgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-autoipd | Sep 16, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-libsUpgrade avahi-autoipdUpgrade avahiUpgrade avahi-ui-gtk3 | Sep 29, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade avahi-ui-gtk3Upgrade python2-avahiUpgrade python3-avahiUpgrade avahi-libsUpgrade avahi-glibUpgrade avahi-autoipdUpgrade avahiUpgrade avahi-gobjectUpgrade avahi-devel | Sep 24, 2021 | Jun 2, 2021 |
| Oracle Solaris | — | Upgrade system/network/avahi/gui to version 0.7-11.4.35.0.1.94.2 on Solaris 11.4Upgrade system/network/avahi to version 0.7-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Jun 2, 2021 |
| Oracle_linux | — | Upgrade avahi-autoipdUpgrade avahi-compat-howl-develUpgrade python3-avahiUpgrade avahi-glib-develUpgrade avahi-libsUpgrade avahi-compat-howlUpgrade avahi-uiUpgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-compat-libdns_sd-develUpgrade avahiUpgrade avahi-develUpgrade avahi-compat-libdns_sdUpgrade avahi-ui-develUpgrade avahi-toolsUpgrade avahi-ui-gtk3Upgrade avahi-gobject-devel | Nov 16, 2023 | Mar 10, 2021 |
| Redhat_linux | — | Upgrade avahi-ui-gtk3-debuginfoUpgrade avahi-compat-howl-develUpgrade avahi-ui-gtk3Upgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-libsUpgrade avahiUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-ui-develUpgrade avahi-gobject-develUpgrade avahi-compat-howlNo solution existsUpgrade avahi-toolsUpgrade avahi-debugsourceUpgrade avahi-debuginfoUpgrade avahi-glib-develUpgrade avahi-tools-debuginfoUpgrade avahi-ui-tools-debuginfoUpgrade avahi-libs-debuginfoUpgrade avahi-compat-libdns_sd-develUpgrade avahi-glib-debuginfoUpgrade avahi-gobjectUpgrade python3-avahiUpgrade avahi-autoipd-debuginfoUpgrade avahi-compat-howl-debuginfoUpgrade avahi-gobject-debuginfoUpgrade avahi-develUpgrade avahi-uiUpgrade avahi-compat-libdns_sdUpgrade avahi-glibUpgrade avahi-autoipdUpgrade avahi-ui-debuginfo | Nov 8, 2023 | Jun 2, 2021 |
| Rocky_linux | — | — | Aug 15, 2024 | Jun 2, 2021 |
| Suse | — | Upgrade libdns_sd-32bitUpgrade avahi-utils-gtkUpgrade libavahi-glib1-32bitUpgrade avahi-monoUpgrade libavahi-qt4-develUpgrade libhowl0Upgrade avahi-autoipdUpgrade libavahi-common3-32bitUpgrade libavahi-gobject0Upgrade python3-avahiUpgrade libdns_sdUpgrade libavahi-client3Upgrade typelib-1_0-avahi-0_6Upgrade avahiUpgrade libavahi-qt4-1Upgrade libavahi-glib-develUpgrade avahi-utilsUpgrade avahi-langUpgrade python-avahiUpgrade libavahi-ui-gtk3-0Upgrade avahi-compat-mdnsresponder-develUpgrade libavahi-common3Upgrade libavahi-libevent1Upgrade libavahi-gobject-develUpgrade libavahi-glib1Upgrade libavahi-develUpgrade python3-avahi-gtkUpgrade python-avahi-gtkUpgrade libavahi-core7Upgrade libavahi-client3-32bitUpgrade avahi-compat-howl-develUpgrade libavahi-ui0 | May 5, 2021 | May 4, 2021 |
| Ubuntu | — | Upgrade libavahi-core7 (Ubuntu Pro)Upgrade libavahi-core7Upgrade avahi-daemonUpgrade avahi-daemon (Ubuntu Pro) | Jul 8, 2021 | May 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub