Red Hat Security Advisory

RHSA-2023:7836

avahi security update

Released 2023-12-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) avahi-compat-howl-0.7-21.el8_9.1, avahi-compat-howl-devel-0.7-21.el8_9.1, avahi-compat-libdns_sd-0.7-21.el8_9.1 +6
Red Hat Enterprise Linux AppStream (v. 8) avahi-tools-0.7-21.el8_9.1, avahi-ui-gtk3-0.7-21.el8_9.1
Red Hat Enterprise Linux BaseOS (v. 8) avahi-0.7-21.el8_9.1, avahi-autoipd-0.7-21.el8_9.1, avahi-glib-0.7-21.el8_9.1 +3

TI-2023-19853 CVE-2023-38473 · GHSA-5qm6-j92f-79jp

LOW 28

A vulnerability was found in Avahi.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0032 Published 2023-11-02 Partial fix · 0.9-rc1 CWE-617

TI-2023-19852 CVE-2023-38472 · GHSA-4g3h-v9fp-pgm4

LOW 28

A vulnerability was found in Avahi.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0032 Published 2023-11-02 Partial fix · 0.9-rc1 CWE-617

TI-2023-19851 CVE-2023-38471 · GHSA-h3x3-j454-4phv

LOW 28

A vulnerability was found in Avahi.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00328 Published 2023-11-02 Partial fix · 0.9-rc1 CWE-617

TI-2023-19850 CVE-2023-38470 · GHSA-mg8v-g9mc-p4f8

LOW 28

A vulnerability was found in Avahi.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0032 Published 2023-11-02 Partial fix · 0.9-rc1 CWE-617

TI-2023-19849 CVE-2023-38469 · GHSA-cg96-q9gq-2pr7

LOW 28

A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0032 Published 2023-11-02 Partial fix · 0.9-rc1 CWE-617

TI-2021-02431 CVE-2021-3468 · GHSA-43rm-fv4g-cmj8

LOW 25

A flaw was found in avahi in versions 0.6 up to 0.8.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00439 Published 2021-06-02 Partial fix CWE-835