A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade avahi-uiUpgrade avahi-ui-gtk3Upgrade avahi-compat-howl-develUpgrade avahi-develUpgrade avahiUpgrade avahi-gobject-develUpgrade avahi-toolsUpgrade avahi-gobjectUpgrade avahi-autoipdUpgrade avahi-ui-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sdUpgrade python3-avahiUpgrade avahi-libsUpgrade avahi-compat-howlUpgrade avahi-glib | Nov 16, 2023 | Jun 2, 2021 |
| Alpine Linux | — | Upgrade avahi | Mar 26, 2024 | Jun 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade avahi-ui-toolsUpgrade avahi-qt4-develUpgrade avahi-autoipdUpgrade avahi-ui-gtk3Upgrade avahi-compat-howl-develUpgrade avahi-develUpgrade avahi-uiUpgrade avahi-compat-libdns_sd-develUpgrade avahiUpgrade avahi-dnsconfdUpgrade avahi-compat-libdns_sdUpgrade avahi-toolsUpgrade avahi-glibUpgrade avahi-gobject-develUpgrade avahi-gobjectUpgrade avahi-glib-develUpgrade avahi-compat-howlUpgrade avahi-qt4Upgrade avahi-ui-develUpgrade avahi-qt3-develUpgrade avahi-debuginfoUpgrade avahi-qt3Upgrade avahi-libs | Dec 5, 2023 | Jun 2, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 2, 2021 |
| Centos_linux | — | Upgrade avahi-debugsourceUpgrade avahi-libsUpgrade avahi-ui-tools-debuginfoUpgrade avahi-toolsUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-gobject-debuginfoUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-ui-gtk3Upgrade avahi-dnsconfd-debuginfoUpgrade python3-avahiUpgrade avahi-gobjectUpgrade avahi-ui-debuginfoUpgrade avahiUpgrade avahi-glibUpgrade avahi-autoipdUpgrade avahi-compat-howl-debuginfoUpgrade avahi-debuginfoUpgrade avahi-libs-debuginfoUpgrade avahi-glib-debuginfoUpgrade avahi-autoipd-debuginfoUpgrade avahi-tools-debuginfo | Nov 8, 2023 | Jun 2, 2021 |
| Debian | — | Upgrade avahi | Jun 9, 2022 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade avahi-ui-gtk3Upgrade avahi-libsUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahi-glib | Sep 16, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade avahi-ui-gtk3Upgrade avahi-libsUpgrade avahi-autoipdUpgrade avahiUpgrade avahi-glibUpgrade avahi-gobject | Sep 29, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade avahi-ui-gtk3Upgrade python2-avahiUpgrade python3-avahiUpgrade avahi-libsUpgrade avahi-gobjectUpgrade avahiUpgrade avahi-develUpgrade avahi-glibUpgrade avahi-autoipd | Sep 24, 2021 | Jun 2, 2021 |
| Oracle Solaris | — | Upgrade system/network/avahi/gui to version 0.7-11.4.35.0.1.94.2 on Solaris 11.4Upgrade system/network/avahi to version 0.7-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Jun 2, 2021 |
| Oracle_linux | — | Upgrade avahi-toolsUpgrade avahi-gobjectUpgrade avahi-libsUpgrade avahi-gobject-develUpgrade avahi-glibUpgrade avahi-compat-howlUpgrade avahi-develUpgrade avahiUpgrade avahi-ui-develUpgrade avahi-uiUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-libdns_sdUpgrade avahi-ui-gtk3Upgrade python3-avahiUpgrade avahi-autoipdUpgrade avahi-compat-howl-develUpgrade avahi-glib-devel | Nov 16, 2023 | Mar 10, 2021 |
| Redhat_linux | — | Upgrade avahi-compat-libdns_sd-develUpgrade avahi-glib-develUpgrade avahi-ui-debuginfoUpgrade avahi-autoipdUpgrade avahi-debuginfoUpgrade avahi-gobjectUpgrade avahi-develUpgrade avahi-glib-debuginfoUpgrade avahi-ui-tools-debuginfoUpgrade avahi-autoipd-debuginfoUpgrade avahi-uiUpgrade avahi-libs-debuginfoUpgrade avahi-glibUpgrade python3-avahiUpgrade avahi-compat-howl-debuginfoUpgrade avahi-compat-libdns_sdUpgrade avahi-gobject-debuginfoUpgrade avahi-tools-debuginfoUpgrade avahi-libsUpgrade avahiNo solution existsUpgrade avahi-debugsourceUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-compat-howlUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-compat-howl-develUpgrade avahi-toolsUpgrade avahi-gobject-develUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-ui-gtk3Upgrade avahi-ui-devel | Nov 8, 2023 | Jun 2, 2021 |
| Rocky_linux | — | — | Aug 15, 2024 | Jun 2, 2021 |
| Suse | — | Upgrade libavahi-develUpgrade libavahi-qt4-1Upgrade libavahi-glib1Upgrade libavahi-ui-gtk3-0Upgrade avahi-compat-howl-develUpgrade libavahi-common3Upgrade libavahi-libevent1Upgrade avahi-utilsUpgrade libavahi-ui0Upgrade libavahi-gobject-develUpgrade avahi-langUpgrade python-avahiUpgrade libavahi-client3-32bitUpgrade typelib-1_0-Avahi-0_6Upgrade libavahi-glib-develUpgrade libavahi-core7Upgrade python-avahi-gtkUpgrade python3-avahi-gtkUpgrade python3-avahiUpgrade avahi-monoUpgrade libavahi-common3-32bitUpgrade libdns_sd-32bitUpgrade libavahi-qt4-develUpgrade libavahi-client3Upgrade libdns_sdUpgrade libavahi-glib1-32bitUpgrade libavahi-gobject0Upgrade avahiUpgrade avahi-autoipdUpgrade avahi-compat-mDNSResponder-develUpgrade avahi-utils-gtkUpgrade libhowl0 | May 5, 2021 | May 4, 2021 |
| Ubuntu | — | Upgrade avahi-daemonUpgrade libavahi-core7Upgrade libavahi-core7 (Ubuntu Pro)Upgrade avahi-daemon (Ubuntu Pro) | Jul 8, 2021 | May 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub