A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade avahiUpgrade avahi-libsUpgrade avahi-toolsUpgrade avahi-compat-howl-develUpgrade avahi-compat-howlUpgrade avahi-glibUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-libdns_sdUpgrade avahi-glib-develUpgrade avahi-devel | Nov 16, 2023 | May 7, 2021 |
| Alpine Linux | — | Upgrade avahi | Aug 22, 2024 | May 7, 2021 |
| Centos_linux | — | Upgrade avahi-ui-debuginfoUpgrade avahi-tools-debuginfoUpgrade avahi-debuginfoUpgrade avahi-libs-debuginfoUpgrade avahi-toolsUpgrade avahi-glib-debuginfoUpgrade avahi-libsUpgrade avahi-compat-howl-debuginfoUpgrade avahi-glibUpgrade avahi-gobject-debuginfoUpgrade avahi-autoipd-debuginfoUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-ui-tools-debuginfoUpgrade avahi-debugsourceUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi | Nov 8, 2023 | May 7, 2021 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | May 7, 2021 |
| Oracle_linux | — | Upgrade avahi-compat-howl-develUpgrade avahi-compat-libdns_sdUpgrade avahiUpgrade avahi-glibUpgrade avahi-develUpgrade avahi-compat-howlUpgrade avahi-libsUpgrade avahi-compat-libdns_sd-develUpgrade avahi-toolsUpgrade avahi-glib-devel | Nov 16, 2023 | Mar 29, 2021 |
| Redhat_linux | — | Upgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-ui-tools-debuginfoUpgrade avahi-debugsourceUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-gobject-debuginfoUpgrade avahi-glibUpgrade avahi-tools-debuginfoUpgrade avahi-toolsUpgrade avahi-debuginfoUpgrade avahi-compat-howl-develUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-compat-libdns_sdUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-autoipd-debuginfoUpgrade avahi-compat-howlUpgrade avahi-compat-howl-debuginfoUpgrade avahiUpgrade avahi-ui-debuginfoUpgrade avahi-libsUpgrade avahi-develUpgrade avahi-glib-debuginfoUpgrade avahi-libs-debuginfo | Nov 8, 2023 | May 7, 2021 |
| Suse | — | Upgrade typelib-1_0-Avahi-0_6Upgrade avahiUpgrade libavahi-gobject-develUpgrade libavahi-ui-gtk3-0Upgrade avahi-compat-howl-develUpgrade avahi-compat-mDNSResponder-develUpgrade libavahi-client3-32bitUpgrade libavahi-client3Upgrade libavahi-common3Upgrade avahi-utils-gtkUpgrade libavahi-common3-32bitUpgrade libavahi-gobject0Upgrade avahi-langUpgrade libavahi-glib-develUpgrade libavahi-libevent1Upgrade libdns_sdUpgrade libavahi-develUpgrade avahi-autoipdUpgrade libavahi-glib1Upgrade libhowl0Upgrade libavahi-core7Upgrade avahi-utils | Oct 26, 2022 | May 7, 2021 |
| Ubuntu | — | Upgrade libavahi-core7Upgrade avahi-daemon | Jul 8, 2021 | May 7, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub