Most recent entries from all

ALSA-2023:7836 — Moderate: avahi security update

Affected: AlmaLinux:8: avahi, AlmaLinux:8: avahi-autoipd, AlmaLinux:8: avahi-compat-howl, AlmaLinux:8: avahi-compat-howl-devel, AlmaLinux:8: avahi-compat-libdns_sd, AlmaLinux:8: avahi-compat-libdns_sd-devel, AlmaLinux:8: avahi-devel, AlmaLinux:8: avahi-glib, AlmaLinux:8: avahi-glib-devel, AlmaLinux:8: avahi-gobject and 7 more

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468) * avahi: Reachable assertion in avahi_dns_packet_append_record (CVE-2023-38469) * avahi: Reachable assertion in avahi_escape_label (CVE-2023-38470) * avahi: Reachable assertion in dbus_set_host_name (CVE-2023-38471) * avahi: Reachable assertion in avahi_rdata_parse (CVE-2023-38472) * avahi: Reachable assertion in avahi_alternative_host_name (CVE-2023-38473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-06999

BELL-CVE-2023-38469

Affected: Alpaquita:23: avahi, Alpaquita:stream: avahi

certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2025-avi-0969

Withdrawn: CLEANSTART-2026-MB75553 — vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record

Withdrawn by the publisher.

Affected: CleanStart: playwright-python

Multiple security vulnerabilities affect the playwright-python package. A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. See references for individual vulnerability details.

EUVD-2026-258447

fkie_cve-2023-38469

A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.

GHSA-cg96-q9gq-2pr7

A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.

gsd-2023-38469

msrc_CVE-2023-38469 — Reachable assertion in avahi_dns_packet_append_record

msrc_CVE-2023-38469

OESA-2023-1812 — avahi security update

Affected: openEuler:20.03-LTS-SP1: avahi, openEuler:20.03-LTS-SP3: avahi, openEuler:22.03-LTS: avahi, openEuler:22.03-LTS-SP1: avahi, openEuler:22.03-LTS-SP2: avahi

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. Security Fix(es): A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.(CVE-2023-38469)

openSUSE-SU-2024:13804-1 — avahi-0.8-33.1 on GA media

avahi-0.8-33.1 on GA media

RHSA-2024:0418 — Red Hat Security Advisory: avahi security update

avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket avahi: Reachable assertion in avahi_dns_packet_append_record avahi: Reachable assertion in avahi_escape_label avahi: Reachable assertion in dbus_set_host_name avahi: Reachable assertion in avahi_rdata_parse avahi: Reachable assertion in avahi_alternative_host_name

SUSE-SU-2024:1008-1 — Security update for avahi

Security update for avahi

UBUNTU-CVE-2023-38469

Affected: Ubuntu:Pro:14.04:LTS: avahi, Ubuntu:Pro:16.04:LTS: avahi, Ubuntu:Pro:18.04:LTS: avahi, Ubuntu:20.04:LTS: avahi, Ubuntu:22.04:LTS: avahi

A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.

WID-SEC-W-2023-2023 — avahi: Mehrere Schwachstellen

Ein Angreifer kann diese Schwachstellen in avahi ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.