A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade avahiUpgrade avahi-ui-gtk3Upgrade avahi-develUpgrade avahi-uiUpgrade avahi-compat-howl-develUpgrade avahi-gobject-develUpgrade avahi-glibUpgrade avahi-toolsUpgrade avahi-compat-howlUpgrade avahi-compat-libdns_sdUpgrade avahi-autoipdUpgrade avahi-glib-develUpgrade avahi-gobjectUpgrade avahi-ui-develUpgrade avahi-libsUpgrade python3-avahiUpgrade avahi-compat-libdns_sd-devel | Nov 16, 2023 | Jun 2, 2021 |
| Alpine Linux | — | Upgrade avahi | Mar 26, 2024 | Jun 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade avahi-dnsconfdUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-ui-gtk3Upgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-howl-develUpgrade avahi-ui-toolsUpgrade avahi-qt4-develUpgrade avahi-develUpgrade avahi-uiUpgrade avahi-ui-develUpgrade avahi-libsUpgrade avahi-qt3-develUpgrade avahi-debuginfoUpgrade avahi-gobject-develUpgrade avahi-toolsUpgrade avahi-gobjectUpgrade avahi-qt3Upgrade avahi-glib-develUpgrade avahi-qt4Upgrade avahi-glibUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-howl | Dec 5, 2023 | Jun 2, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 2, 2021 |
| Centos_linux | — | Upgrade avahi-debugsourceUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-gobject-debuginfoUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-toolsUpgrade python3-avahiUpgrade avahi-ui-gtk3Upgrade avahi-dnsconfd-debuginfoUpgrade avahi-ui-tools-debuginfoUpgrade avahi-libsUpgrade avahi-glib-debuginfoUpgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahi-glibUpgrade avahiUpgrade avahi-autoipd-debuginfoUpgrade avahi-ui-debuginfoUpgrade avahi-libs-debuginfoUpgrade avahi-debuginfoUpgrade avahi-compat-howl-debuginfoUpgrade avahi-tools-debuginfo | Nov 8, 2023 | Jun 2, 2021 |
| Debian | — | Upgrade avahi | Jun 9, 2022 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-libsUpgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahi-glib | Sep 16, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahi-libsUpgrade avahi-glib | Sep 29, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade avahi-ui-gtk3Upgrade python2-avahiUpgrade avahi-libsUpgrade python3-avahiUpgrade avahi-autoipdUpgrade avahi-develUpgrade avahiUpgrade avahi-gobjectUpgrade avahi-glib | Sep 24, 2021 | Jun 2, 2021 |
| Oracle Solaris | — | Upgrade system/network/avahi/gui to version 0.7-11.4.35.0.1.94.2 on Solaris 11.4Upgrade system/network/avahi to version 0.7-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Jun 2, 2021 |
| Oracle_linux | — | Upgrade avahi-autoipdUpgrade avahi-glib-develUpgrade python3-avahiUpgrade avahi-compat-howl-develUpgrade avahi-glibUpgrade avahi-develUpgrade avahi-compat-libdns_sdUpgrade avahiUpgrade avahi-compat-libdns_sd-develUpgrade avahi-gobject-develUpgrade avahi-compat-howlUpgrade avahi-toolsUpgrade avahi-ui-develUpgrade avahi-uiUpgrade avahi-libsUpgrade avahi-gobjectUpgrade avahi-ui-gtk3 | Nov 16, 2023 | Mar 10, 2021 |
| Redhat_linux | — | Upgrade avahi-gobject-develUpgrade avahiNo solution existsUpgrade avahi-libsUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-ui-gtk3Upgrade avahi-debugsourceUpgrade avahi-compat-howlUpgrade avahi-ui-develUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-toolsUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-compat-howl-develUpgrade avahi-glib-debuginfoUpgrade avahi-debuginfoUpgrade avahi-autoipdUpgrade avahi-develUpgrade avahi-glib-develUpgrade avahi-tools-debuginfoUpgrade avahi-glibUpgrade avahi-gobject-debuginfoUpgrade avahi-compat-libdns_sdUpgrade avahi-ui-tools-debuginfoUpgrade avahi-libs-debuginfoUpgrade avahi-ui-debuginfoUpgrade avahi-gobjectUpgrade avahi-autoipd-debuginfoUpgrade python3-avahiUpgrade avahi-uiUpgrade avahi-compat-howl-debuginfoUpgrade avahi-compat-libdns_sd-devel | Nov 8, 2023 | Jun 2, 2021 |
| Rocky_linux | — | — | Aug 15, 2024 | Jun 2, 2021 |
| Suse | — | Upgrade libavahi-gobject-develUpgrade avahi-utilsUpgrade avahi-langUpgrade python3-avahi-gtkUpgrade typelib-1_0-Avahi-0_6Upgrade libavahi-libevent1Upgrade libavahi-core7Upgrade libavahi-client3-32bitUpgrade libavahi-qt4-1Upgrade libavahi-glib1Upgrade python-avahiUpgrade libavahi-ui-gtk3-0Upgrade libavahi-glib-develUpgrade libavahi-common3Upgrade libavahi-develUpgrade libavahi-ui0Upgrade python-avahi-gtkUpgrade avahi-compat-howl-develUpgrade avahi-compat-mDNSResponder-develUpgrade avahi-monoUpgrade libdns_sd-32bitUpgrade libhowl0Upgrade avahi-autoipdUpgrade libavahi-client3Upgrade libdns_sdUpgrade avahi-utils-gtkUpgrade libavahi-gobject0Upgrade libavahi-qt4-develUpgrade libavahi-glib1-32bitUpgrade python3-avahiUpgrade avahiUpgrade libavahi-common3-32bit | May 5, 2021 | May 4, 2021 |
| Ubuntu | — | Upgrade avahi-daemon (Ubuntu Pro)Upgrade avahi-daemonUpgrade libavahi-core7Upgrade libavahi-core7 (Ubuntu Pro) | Jul 8, 2021 | May 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub