A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-toolsUpgrade avahi-autoipdUpgrade avahi-compat-libdns_sdUpgrade python3-avahiUpgrade avahi-compat-howlUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-libsUpgrade avahi-ui-develUpgrade avahi-develUpgrade avahi-uiUpgrade avahi-gobject-develUpgrade avahi-compat-howl-develUpgrade avahiUpgrade avahi-ui-gtk3 | Nov 16, 2023 | Jun 2, 2021 |
| Alpine Linux | — | Upgrade avahi | Mar 26, 2024 | Jun 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade avahi-glib-develUpgrade avahi-qt3-develUpgrade avahi-qt3Upgrade avahi-gobjectUpgrade avahi-gobject-develUpgrade avahi-toolsUpgrade avahi-glibUpgrade avahi-ui-develUpgrade avahi-debuginfoUpgrade avahi-compat-howlUpgrade avahi-qt4Upgrade avahi-compat-libdns_sdUpgrade avahi-libsUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-howl-develUpgrade avahi-develUpgrade avahi-uiUpgrade avahi-ui-gtk3Upgrade avahi-autoipdUpgrade avahiUpgrade avahi-dnsconfdUpgrade avahi-ui-toolsUpgrade avahi-qt4-devel | Dec 5, 2023 | Jun 2, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 2, 2021 |
| Centos_linux | — | Upgrade avahi-glibUpgrade avahi-autoipd-debuginfoUpgrade avahi-glib-debuginfoUpgrade avahiUpgrade avahi-debuginfoUpgrade avahi-ui-debuginfoUpgrade avahi-tools-debuginfoUpgrade avahi-gobjectUpgrade avahi-compat-howl-debuginfoUpgrade avahi-libs-debuginfoUpgrade avahi-autoipdUpgrade avahi-toolsUpgrade avahi-gobject-debuginfoUpgrade avahi-debugsourceUpgrade avahi-ui-tools-debuginfoUpgrade avahi-compat-libdns_sd-debuginfoUpgrade python3-avahiUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-ui-gtk3Upgrade avahi-ui-gtk3-debuginfoUpgrade avahi-libs | Nov 8, 2023 | Jun 2, 2021 |
| Debian | — | Upgrade avahi | Jun 9, 2022 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-libsUpgrade avahi-glibUpgrade avahi-gobjectUpgrade avahi-autoipd | Sep 16, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade avahi-ui-gtk3Upgrade avahi-libsUpgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-autoipdUpgrade avahi | Sep 29, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade avahi-libsUpgrade avahi-ui-gtk3Upgrade python2-avahiUpgrade python3-avahiUpgrade avahi-develUpgrade avahi-gobjectUpgrade avahi-autoipdUpgrade avahiUpgrade avahi-glib | Sep 24, 2021 | Jun 2, 2021 |
| Oracle Solaris | — | Upgrade system/network/avahi to version 0.7-11.4.35.0.1.94.2 on Solaris 11.4Upgrade system/network/avahi/gui to version 0.7-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Jun 2, 2021 |
| Oracle_linux | — | Upgrade python3-avahiUpgrade avahi-glib-develUpgrade avahi-compat-howl-develUpgrade avahi-autoipdUpgrade avahi-compat-howlUpgrade avahi-uiUpgrade avahi-gobject-develUpgrade avahi-compat-libdns_sdUpgrade avahi-glibUpgrade avahi-develUpgrade avahi-gobjectUpgrade avahi-compat-libdns_sd-develUpgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-ui-develUpgrade avahi-toolsUpgrade avahi-libs | Nov 16, 2023 | Mar 10, 2021 |
| Redhat_linux | — | Upgrade avahi-ui-tools-debuginfoUpgrade avahi-gobject-debuginfoUpgrade avahi-autoipd-debuginfoUpgrade avahi-glibUpgrade avahi-compat-libdns_sdUpgrade avahi-develUpgrade avahi-uiUpgrade avahi-glib-develUpgrade avahi-autoipdUpgrade avahi-tools-debuginfoUpgrade avahi-ui-debuginfoUpgrade avahi-compat-libdns_sd-develUpgrade avahi-glib-debuginfoUpgrade avahi-compat-howl-debuginfoUpgrade avahi-gobjectUpgrade avahi-libs-debuginfoUpgrade avahi-debuginfoUpgrade python3-avahiUpgrade avahi-libsUpgrade avahiUpgrade avahi-ui-develUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-ui-gtk3Upgrade avahi-dnsconfd-debuginfoUpgrade avahi-compat-libdns_sd-debuginfoNo solution existsUpgrade avahi-debugsourceUpgrade avahi-gobject-develUpgrade avahi-compat-howlUpgrade avahi-toolsUpgrade avahi-compat-howl-devel | Nov 8, 2023 | Jun 2, 2021 |
| Rocky_linux | — | — | Aug 15, 2024 | Jun 2, 2021 |
| Suse | — | Upgrade python3-avahiUpgrade libavahi-gobject0Upgrade avahi-autoipdUpgrade avahi-monoUpgrade avahiUpgrade libavahi-qt4-develUpgrade avahi-utils-gtkUpgrade avahi-compat-mDNSResponder-develUpgrade libavahi-glib1-32bitUpgrade libdns_sdUpgrade libavahi-client3Upgrade libhowl0Upgrade libdns_sd-32bitUpgrade libavahi-common3-32bitUpgrade libavahi-ui-gtk3-0Upgrade libavahi-libevent1Upgrade libavahi-glib-develUpgrade libavahi-develUpgrade libavahi-gobject-develUpgrade avahi-compat-howl-develUpgrade libavahi-qt4-1Upgrade libavahi-client3-32bitUpgrade python-avahiUpgrade libavahi-glib1Upgrade avahi-langUpgrade libavahi-common3Upgrade libavahi-ui0Upgrade python3-avahi-gtkUpgrade typelib-1_0-Avahi-0_6Upgrade avahi-utilsUpgrade python-avahi-gtkUpgrade libavahi-core7 | May 5, 2021 | May 4, 2021 |
| Ubuntu | — | Upgrade avahi-daemon (Ubuntu Pro)Upgrade avahi-daemonUpgrade libavahi-core7Upgrade libavahi-core7 (Ubuntu Pro) | Jul 8, 2021 | May 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub