All errata/c10f2/ALT-PU-2024-7867-3
ALT-PU-2024-7867-3

Package update avahi in branch c10f2

Version0.8-alt4
Published2024-05-19
Max severityMEDIUM
Severity:

Closed issues (6)

BDU:2023-08473
MEDIUM5.5

Уязвимость функции avahi_rdata_parse() системы обнаружения сервисов в локальной сети Avahi, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2023-12-06Modified: 2025-08-19
CVSS 3.xMEDIUM 5.5
CVSS:3.x/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0MEDIUM 4.6
CVSS:2.0/AV:L/AC:L/Au:S/C:N/I:N/A:C
References
CVE-2023-38469
MEDIUM5.5

A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.

Published: 2023-11-02Modified: 2025-11-03
CVSS 3.xMEDIUM 5.5
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVE-2023-38470
MEDIUM5.5

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.

Published: 2023-11-02Modified: 2025-11-03
CVSS 3.xMEDIUM 5.5
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVE-2023-38471
MEDIUM5.5

A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.

Published: 2023-11-02Modified: 2025-11-03
CVSS 3.xMEDIUM 5.5
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVE-2023-38472
MEDIUM5.5

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.

Published: 2023-11-02Modified: 2025-11-03
CVSS 3.xMEDIUM 5.5
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVE-2023-38473
MEDIUM5.5

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.

Published: 2023-11-02Modified: 2025-11-03
CVSS 3.xMEDIUM 5.5
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Closed bugs (1)

avahi-bookmarks: cannot import name ‘gireactor’ from ‘twisted.internet’