Lucene search

K
osvGoogleOSV:SUSE-SU-2024:2200-1
HistoryJun 25, 2024 - 11:53 a.m.

Security update for avahi

2024-06-2511:53:18
Google
osv.dev
1
avahi
security update
vulnerability fix
cve-2023-38471
cve-2023-38469

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

Low

This update for avahi fixes the following issues:

  • CVE-2023-38471: Fixed a reachable assertion in dbus_set_host_name. (bsc#1216594)
  • CVE-2023-38469: Fixed a reachable assertion in avahi_dns_packet_append_record. (bsc#1216598)

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

Low