Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:avahi:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductAvahi (a90fbb28-b489-50e5-8e69-2e9c7b0a8e2c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-38473 vulnerable 2026-06-08 06:08:18.026776 Reachable assertion in avahi_alternative_host_name
MEDIUM (6.2)
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.
Published: 2023-11-02T15:00:19.576Z
Updated: 2025-11-03T21:49:11.746Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38472 vulnerable 2026-06-08 06:08:18.026127 Reachable assertion in avahi_rdata_parse
MEDIUM (6.2)
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.
Published: 2023-11-02T14:59:24.996Z
Updated: 2025-11-03T21:49:10.298Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38471 vulnerable 2026-06-08 06:08:18.025475 Reachable assertion in dbus_set_host_name
MEDIUM (6.2)
A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.
Published: 2023-11-02T14:58:22.628Z
Updated: 2025-11-03T21:49:08.851Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38470 vulnerable 2026-06-08 06:08:18.024896 Reachable assertion in avahi_escape_label
MEDIUM (6.2)
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.
Published: 2023-11-02T14:57:28.872Z
Updated: 2025-11-03T21:49:07.373Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38469 vulnerable 2026-06-08 06:08:18.015231 Reachable assertion in avahi_dns_packet_append_record
MEDIUM (6.2)
A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.
Published: 2023-11-02T14:49:26.283Z
Updated: 2025-11-03T21:49:05.912Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1981 vulnerable 2026-06-08 05:52:37.336283 Details available
A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash.
Published: 2023-05-26T00:00:00.000Z
Updated: 2025-11-03T21:47:06.552Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3502 vulnerable 2026-06-08 05:33:52.504642 Details available
A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.
Published: 2021-05-07T11:46:21.000Z
Updated: 2024-08-03T16:53:17.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3468 vulnerable 2026-06-08 05:33:52.385006 Details available
A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.
Published: 2021-06-02T15:09:21.000Z
Updated: 2025-02-13T16:28:23.614Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.