Moderate: avahi security update
Summary
ALSA-2023:7190: Moderate: avahi security update. Affects avahi versions < 0.7-21.el8. Fixed in 0.7-21.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.
Vulnerability Detail
The avahi-daemon component of Avahi can be crashed via DBus, leading to a denial of service (DoS) condition. This vulnerability is identified as CVE-2023-1981. An attacker can exploit this vulnerability to crash the avahi-daemon service, disrupting service discovery and potentially causing a system to become unresponsive.
How To Fix
Minimum fixed version
0.7-21.el8
This is the first release that contains the fix.
sudo dnf update avahiTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the security update as soon as possible.
Conclusion
It is important to update the avahi package to address this vulnerability and ensure the security and stability of your system. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for avahi →
FAQ
Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It allows for easy service discovery on a local network.
This vulnerability allows an attacker to crash the avahi-daemon service, potentially causing a denial of service (DoS) condition.
To fix this vulnerability, update the avahi package to version 0.7-21.el8 or later.
There is no known workaround for this vulnerability. It is recommended to apply the security update.
You can find more information about this vulnerability in the CVE page listed in the References section of the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for avahi.
