Approved changes feed: RSS · Atom

cpe:2.3:a:avahi:avahi:0.8-5:*:*:*:*:*:*:*

part: a version: 0.8-5 update: *

VendorAvahi (5cd1906b-0e44-5d10-b3fd-17ddcbab466a)
ProductAvahi (1ff0f7ae-d383-5987-aaf4-54e7463edaa5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/avahi purl2cpe 2026-06-01 10:16:59.654060
pkg:deb/ubuntu/avahi purl2cpe 2026-06-01 10:16:59.654061
pkg:github/lathiat/avahi purl2cpe 2026-06-01 10:16:59.654063
pkg:gitlab/redhat/avahi purl2cpe 2026-06-01 10:16:59.654064
pkg:rpm/centos/avahi purl2cpe 2026-06-01 10:16:59.654065
pkg:rpm/fedora/avahi purl2cpe 2026-06-01 10:16:59.654067
pkg:rpm/opensuse/avahi purl2cpe 2026-06-01 10:16:59.654068

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-3502 vulnerable 2026-06-08 05:33:52.506900 Details available
A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.
Published: 2021-05-07T11:46:21.000Z
Updated: 2024-08-03T16:53:17.966Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.