Most recent entries from all

ALSA-2023:7836 — Moderate: avahi security update

Affected: AlmaLinux:8: avahi, AlmaLinux:8: avahi-autoipd, AlmaLinux:8: avahi-compat-howl, AlmaLinux:8: avahi-compat-howl-devel, AlmaLinux:8: avahi-compat-libdns_sd, AlmaLinux:8: avahi-compat-libdns_sd-devel, AlmaLinux:8: avahi-devel, AlmaLinux:8: avahi-glib, AlmaLinux:8: avahi-glib-devel, AlmaLinux:8: avahi-gobject and 7 more

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468) * avahi: Reachable assertion in avahi_dns_packet_append_record (CVE-2023-38469) * avahi: Reachable assertion in avahi_escape_label (CVE-2023-38470) * avahi: Reachable assertion in dbus_set_host_name (CVE-2023-38471) * avahi: Reachable assertion in avahi_rdata_parse (CVE-2023-38472) * avahi: Reachable assertion in avahi_alternative_host_name (CVE-2023-38473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-07011

BELL-CVE-2023-38470

Affected: Alpaquita:23: avahi, Alpaquita:stream: avahi

certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2025-avi-0969

CLEANSTART-2026-FV76384 — Security fix for CVE-2023-38470 applied in: playwright-python 1.54.0-r1

Affected: CleanStart: playwright-python

Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-258448

fkie_cve-2023-38470

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.

GHSA-mg8v-g9mc-p4f8

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.

gsd-2023-38470

msrc_CVE-2023-38470 — Reachable assertion in avahi_escape_label

msrc_CVE-2023-38470

OESA-2023-1758 — avahi security update

Affected: openEuler:20.03-LTS-SP1: avahi, openEuler:20.03-LTS-SP3: avahi, openEuler:22.03-LTS: avahi, openEuler:22.03-LTS-SP1: avahi, openEuler:22.03-LTS-SP2: avahi

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. Security Fix(es): A reachable assertion was found in avahi_escape_label. References: https://github.com/lathiat/avahi/issues/454(CVE-2023-38470)

openSUSE-SU-2024:13393-1 — avahi-0.8-27.1 on GA media

avahi-0.8-27.1 on GA media

RHSA-2024:0418 — Red Hat Security Advisory: avahi security update

avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket avahi: Reachable assertion in avahi_dns_packet_append_record avahi: Reachable assertion in avahi_escape_label avahi: Reachable assertion in dbus_set_host_name avahi: Reachable assertion in avahi_rdata_parse avahi: Reachable assertion in avahi_alternative_host_name

SUSE-SU-2023:4910-1 — Security update for avahi

Security update for avahi

UBUNTU-CVE-2023-38470

Affected: Ubuntu:Pro:14.04:LTS: avahi, Ubuntu:Pro:16.04:LTS: avahi, Ubuntu:Pro:18.04:LTS: avahi, Ubuntu:20.04:LTS: avahi, Ubuntu:22.04:LTS: avahi

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.

WID-SEC-W-2023-2023 — avahi: Mehrere Schwachstellen

Ein Angreifer kann diese Schwachstellen in avahi ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.