Most recent entries from all

ALSA-2023:6707 — Moderate: avahi security update

Affected: AlmaLinux:9: avahi, AlmaLinux:9: avahi-compat-howl, AlmaLinux:9: avahi-compat-howl-devel, AlmaLinux:9: avahi-compat-libdns_sd, AlmaLinux:9: avahi-compat-libdns_sd-devel, AlmaLinux:9: avahi-devel, AlmaLinux:9: avahi-glib, AlmaLinux:9: avahi-glib-devel, AlmaLinux:9: avahi-libs, AlmaLinux:9: avahi-tools

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468) * avahi: reachable assertion in avahi_s_host_name_resolver_start when trying to resolve badly-formatted hostnames (CVE-2021-3502) * avahi: avahi-daemon can be crashed via DBus (CVE-2023-1981)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-03858

BELL-CVE-2023-1981

Affected: Alpaquita:23: avahi, Alpaquita:stream: avahi

certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2025-avi-0969

EUVD-2026-258376

fkie_cve-2023-1981

A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash.

GHSA-55h6-xcvg-4r99

A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash.

gsd-2023-1981

msrc_CVE-2023-1981 — A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call causing the a…

msrc_CVE-2023-1981

OESA-2023-1240 — avahi security update

Affected: openEuler:20.03-LTS-SP1: avahi, openEuler:20.03-LTS-SP3: avahi, openEuler:22.03-LTS: avahi, openEuler:22.03-LTS-SP1: avahi

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. Security Fix(es): It was discovered that the avahi deamon can be locally crashed by a dbus call made by an unprivileged user, causing a denial of service. References: https://github.com/lathiat/avahi/issues/375(CVE-2023-1981)

openSUSE-SU-2024:12854-1 — avahi-0.8-23.1 on GA media

avahi-0.8-23.1 on GA media

SUSE-SU-2023:1956-1 — Security update for avahi

Security update for avahi

UBUNTU-CVE-2023-1981

Affected: Ubuntu:Pro:14.04:LTS: avahi, Ubuntu:Pro:16.04:LTS: avahi, Ubuntu:Pro:18.04:LTS: avahi, Ubuntu:20.04:LTS: avahi, Ubuntu:22.04:LTS: avahi

A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash.

WID-SEC-W-2023-1071 — avahi: Schwachstelle ermöglicht Denial of Service

Ein lokaler Angreifer kann eine Schwachstelle in avahi ausnutzen, um einen Denial of Service Angriff durchzuführen.