A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade avahi-develUpgrade avahi-compat-libdns_sdUpgrade avahi-glib-develUpgrade avahi-glibUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-howlUpgrade avahi-toolsUpgrade avahi-libsUpgrade avahi-compat-howl-develUpgrade avahi | Nov 16, 2023 | May 7, 2021 |
| Alpine Linux | — | Upgrade avahi | Aug 22, 2024 | May 7, 2021 |
| Centos_linux | — | Upgrade avahi-libsUpgrade avahi-compat-howl-debuginfoUpgrade avahi-ui-debuginfoUpgrade avahi-glibUpgrade avahi-libs-debuginfoUpgrade avahi-gobject-debuginfoUpgrade avahi-toolsUpgrade avahi-tools-debuginfoUpgrade avahi-debuginfoUpgrade avahi-glib-debuginfoUpgrade avahiUpgrade avahi-autoipd-debuginfoUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-ui-tools-debuginfoUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-debugsourceUpgrade avahi-dnsconfd-debuginfo | Nov 8, 2023 | May 7, 2021 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | May 7, 2021 |
| Oracle_linux | — | Upgrade avahi-glibUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-howl-develUpgrade avahiUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-howlUpgrade avahi-develUpgrade avahi-libsUpgrade avahi-toolsUpgrade avahi-glib-devel | Nov 16, 2023 | Mar 29, 2021 |
| Redhat_linux | — | Upgrade avahi-gobject-debuginfoUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-compat-howl-develUpgrade avahi-tools-debuginfoUpgrade avahi-ui-tools-debuginfoUpgrade avahi-debuginfoUpgrade avahi-debugsourceUpgrade avahi-glibUpgrade avahi-toolsUpgrade avahi-libsUpgrade avahi-autoipd-debuginfoUpgrade avahiUpgrade avahi-libs-debuginfoUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-compat-libdns_sdUpgrade avahi-glib-debuginfoUpgrade avahi-develUpgrade avahi-glib-develUpgrade avahi-compat-howlUpgrade avahi-compat-howl-debuginfoUpgrade avahi-compat-libdns_sd-develUpgrade avahi-ui-debuginfo | Nov 8, 2023 | May 7, 2021 |
| Suse | — | Upgrade libavahi-glib-develUpgrade libhowl0Upgrade libavahi-core7Upgrade libavahi-gobject0Upgrade avahi-utilsUpgrade avahi-langUpgrade libavahi-glib1Upgrade libavahi-libevent1Upgrade libdns_sdUpgrade avahi-autoipdUpgrade libavahi-develUpgrade avahi-compat-mDNSResponder-develUpgrade libavahi-client3Upgrade avahiUpgrade typelib-1_0-Avahi-0_6Upgrade libavahi-common3-32bitUpgrade avahi-compat-howl-develUpgrade avahi-utils-gtkUpgrade libavahi-common3Upgrade libavahi-gobject-develUpgrade libavahi-client3-32bitUpgrade libavahi-ui-gtk3-0 | Oct 26, 2022 | May 7, 2021 |
| Ubuntu | — | Upgrade avahi-daemonUpgrade libavahi-core7 | Jul 8, 2021 | May 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub