Red Hat Security AdvisoryRHSA-2020:1176
avahi security update
Released 2020-03-31 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) avahi-0.6.31-20.el7, avahi-autoipd-0.6.31-20.el7, avahi-glib-0.6.31-20.el7 +3
- Red Hat Enterprise Linux Client Optional (v. 7) avahi-compat-howl-0.6.31-20.el7, avahi-compat-howl-devel-0.6.31-20.el7, avahi-compat-libdns_sd-0.6.31-20.el7 +13
- Red Hat Enterprise Linux ComputeNode (v. 7) avahi-0.6.31-20.el7, avahi-autoipd-0.6.31-20.el7, avahi-glib-0.6.31-20.el7 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) avahi-compat-howl-0.6.31-20.el7, avahi-compat-howl-devel-0.6.31-20.el7, avahi-compat-libdns_sd-0.6.31-20.el7 +15
- Red Hat Enterprise Linux Server (v. 7) avahi-0.6.31-20.el7, avahi-0.6.31-20.el7.ppc, avahi-autoipd-0.6.31-20.el7 +8
- Red Hat Enterprise Linux Server Optional (v. 7) avahi-compat-howl-0.6.31-20.el7, avahi-compat-howl-0.6.31-20.el7.ppc, avahi-compat-howl-devel-0.6.31-20.el7 +26
- Red Hat Enterprise Linux Workstation (v. 7) avahi-0.6.31-20.el7, avahi-autoipd-0.6.31-20.el7, avahi-glib-0.6.31-20.el7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) avahi-compat-howl-0.6.31-20.el7, avahi-compat-howl-devel-0.6.31-20.el7, avahi-compat-libdns_sd-0.6.31-20.el7 +13
Fixes 1 record
Priority MEDIUM 51
avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) a…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.03238 · Published 2017-05-01 · Partial fix CWE-346
