A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade avahi-compat-howlUpgrade avahi-glib-develUpgrade avahi-libsUpgrade avahi-compat-libdns_sdUpgrade python3-avahiUpgrade avahi-glibUpgrade avahi-compat-libdns_sd-develUpgrade avahi-toolsUpgrade avahi-ui-develUpgrade avahi-gobjectUpgrade avahi-autoipdUpgrade avahi-develUpgrade avahi-uiUpgrade avahi-compat-howl-develUpgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-gobject-devel | Nov 16, 2023 | Jun 2, 2021 |
| Alpine Linux | — | Upgrade avahi | Mar 26, 2024 | Jun 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade avahi-uiUpgrade avahi-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-dnsconfdUpgrade avahi-ui-gtk3Upgrade avahi-autoipdUpgrade avahi-compat-howl-develUpgrade avahi-ui-toolsUpgrade avahi-qt4-develUpgrade avahiUpgrade avahi-toolsUpgrade avahi-glibUpgrade avahi-qt4Upgrade avahi-debuginfoUpgrade avahi-qt3Upgrade avahi-compat-libdns_sdUpgrade avahi-compat-howlUpgrade avahi-glib-develUpgrade avahi-qt3-develUpgrade avahi-ui-develUpgrade avahi-gobject-develUpgrade avahi-gobjectUpgrade avahi-libs | Dec 5, 2023 | Jun 2, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 2, 2021 |
| Centos_linux | — | Upgrade avahiUpgrade avahi-compat-howl-debuginfoUpgrade avahi-libs-debuginfoUpgrade avahi-debuginfoUpgrade avahi-gobjectUpgrade avahi-tools-debuginfoUpgrade avahi-autoipdUpgrade avahi-glib-debuginfoUpgrade avahi-glibUpgrade avahi-ui-debuginfoUpgrade avahi-autoipd-debuginfoUpgrade avahi-gobject-debuginfoUpgrade avahi-toolsUpgrade avahi-libsUpgrade avahi-debugsourceUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-ui-gtk3Upgrade avahi-ui-gtk3-debuginfoUpgrade avahi-compat-libdns_sd-debuginfoUpgrade python3-avahiUpgrade avahi-ui-tools-debuginfo | Nov 8, 2023 | Jun 2, 2021 |
| Debian | — | Upgrade avahi | Jun 9, 2022 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade avahiUpgrade avahi-libsUpgrade avahi-ui-gtk3Upgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahi-glib | Sep 16, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade avahi-ui-gtk3Upgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-libsUpgrade avahi | Sep 29, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade avahi-glibUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahi-develUpgrade avahi-ui-gtk3Upgrade avahi-libsUpgrade python3-avahiUpgrade python2-avahi | Sep 24, 2021 | Jun 2, 2021 |
| Oracle Solaris | — | Upgrade system/network/avahi to version 0.7-11.4.35.0.1.94.2 on Solaris 11.4Upgrade system/network/avahi/gui to version 0.7-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Jun 2, 2021 |
| Oracle_linux | — | Upgrade avahi-uiUpgrade avahi-toolsUpgrade avahi-libsUpgrade avahi-ui-gtk3Upgrade avahi-glibUpgrade avahi-compat-howlUpgrade avahi-gobjectUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-libdns_sdUpgrade avahi-develUpgrade avahi-gobject-develUpgrade avahi-ui-develUpgrade avahiUpgrade avahi-compat-howl-develUpgrade avahi-autoipdUpgrade avahi-glib-develUpgrade python3-avahi | Nov 16, 2023 | Mar 10, 2021 |
| Redhat_linux | — | Upgrade avahi-dnsconfd-debuginfoUpgrade avahi-debugsourceUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-ui-gtk3Upgrade avahi-compat-howl-develUpgrade avahi-toolsUpgrade avahi-libsUpgrade avahi-ui-develNo solution existsUpgrade avahi-compat-howlUpgrade avahiUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-gobject-develUpgrade avahi-debuginfoUpgrade avahi-glib-debuginfoUpgrade python3-avahiUpgrade avahi-compat-libdns_sd-develUpgrade avahi-glib-develUpgrade avahi-ui-debuginfoUpgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahi-develUpgrade avahi-autoipd-debuginfoUpgrade avahi-compat-libdns_sdUpgrade avahi-gobject-debuginfoUpgrade avahi-libs-debuginfoUpgrade avahi-glibUpgrade avahi-ui-tools-debuginfoUpgrade avahi-compat-howl-debuginfoUpgrade avahi-tools-debuginfoUpgrade avahi-ui | Nov 8, 2023 | Jun 2, 2021 |
| Rocky_linux | — | — | Aug 15, 2024 | Jun 2, 2021 |
| Suse | — | Upgrade libavahi-client3Upgrade libdns_sdUpgrade avahi-autoipdUpgrade libhowl0Upgrade libdns_sd-32bitUpgrade libavahi-common3-32bitUpgrade avahi-monoUpgrade libavahi-qt4-develUpgrade libavahi-gobject0Upgrade avahi-utils-gtkUpgrade python3-avahiUpgrade libavahi-glib1-32bitUpgrade avahiUpgrade typelib-1_0-avahi-0_6Upgrade libavahi-develUpgrade libavahi-qt4-1Upgrade libavahi-ui-gtk3-0Upgrade python-avahiUpgrade python-avahi-gtkUpgrade avahi-utilsUpgrade avahi-compat-howl-develUpgrade avahi-langUpgrade libavahi-glib-develUpgrade avahi-compat-mdnsresponder-develUpgrade libavahi-common3Upgrade libavahi-glib1Upgrade libavahi-core7Upgrade libavahi-ui0Upgrade python3-avahi-gtkUpgrade libavahi-libevent1Upgrade libavahi-client3-32bitUpgrade libavahi-gobject-devel | May 5, 2021 | May 4, 2021 |
| Ubuntu | — | Upgrade avahi-daemon (Ubuntu Pro)Upgrade avahi-daemonUpgrade libavahi-core7 (Ubuntu Pro)Upgrade libavahi-core7 | Jul 8, 2021 | May 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub