USN-6129-1: Avahi vulnerability
1 June 2023
Avahi could be made to crash if it received specially crafted DBus traffic.
Releases
Packages
- avahi - IPv4LL network address configuration daemon
Details
It was discovered that Avahi incorrectly handled certain DBus messages. A
local attacker could possibly use this issue to cause Avahi to crash,
resulting in a denial of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 23.04
Ubuntu 22.10
Ubuntu 22.04
Ubuntu 20.04
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-6129-2: avahi-autoipd, libavahi-gobject0, libavahi-gobject-dev, avahi, libavahi-qt4-1, libavahi-client-dev, libavahi-glib1, libavahi-ui0, libavahi-glib-dev, libavahi-core-dev, libavahi-common-data, python-avahi, libavahi-common-dev, avahi-ui-utils, avahi-utils, libavahi-ui-gtk3-0, avahi-dnsconfd, libavahi-ui-gtk3-dev, gir1.2-avahi-0.6, libavahi-ui-dev, avahi-discover, libavahi-common3, libavahi-compat-libdnssd1, libavahi-core7, libavahi-client3, libavahi-compat-libdnssd-dev, libavahi-qt4-dev, avahi-daemon