CVE-2021-26720

avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects th...

CVE-2021-26720

CVE-2021-26720 affects the Debian avahi package (up to 0.8-4). The issue arises from avahi-daemon-check-dns.sh being executed with root privileges via /etc/network/if-up.d/avahi-daemon, enabling a local attacker to cause denial of service or create arbitrary empty files through a symlink attack o...

Debian avahi backlink vulnerability

Avahi is a set of local service discovery tools for Linux. A back-linking vulnerability exists in Debian avahi and allows a local attacker to cause a denial of service or create arbitrary empty files via a symbolic link attack on files under /run/avahi-daemon...

PT-2021-7394 · Debian +2 · Avahi +2

Name of the Vulnerable Software and Affected Versions: avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 Description: The issue is related to the execution of avahi-daemon-check-dns.sh as root via /etc/network/if-up.d/avahi-daemon, allowing a local attacker to cause a denial of...

NewStart CGSL CORE 5.04 / MAIN 5.04 : avahi Vulnerability (NS-SA-2020-0058)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has avahi packages installed that are affected by a vulnerability: - avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote...

NewStart CGSL CORE 5.05 / MAIN 5.05 : avahi Vulnerability (NS-SA-2020-0088)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has avahi packages installed that are affected by a vulnerability: - avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote...

SUSE SLES12 Security Update : sane-backends (SUSE-SU-2020:3125-1)

This update for sane-backends fixes the following issues : sane-backends version upgrade to 1.0.31 : - sane-backends version upgrade to 1.0.30 fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862, CVE-2020-12863, CVE-2020-12864, CVE-2020-12865, CVE-2020-12866, CVE-2020-12867 bsc1172524 -...

Low: avahi

Issue Overview: avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service traffic amplification and may cause information leakage by obtaining potentially...

Amazon Linux 2 : avahi (ALAS-2020-1502)

The version of avahi installed on the remote host is prior to 0.6.31-20. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1502 advisory. avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not...

EulerOS Virtualization for ARM 64 3.0.6.0 : avahi (EulerOS-SA-2020-2004)

According to the version of the avahi packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - avahi-daemon in Avahi through 0.6.32 inadvertently responds to IPv6 unicast queries with source addresses that are not...

Huawei EulerOS: Security Advisory for avahi (EulerOS-SA-2020-2004)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : avahi (SUSE-SU-2020:2583-1)

This update for avahi fixes the following issues : When changing ownership of /var/lib/autoipd, only change ownership of files owned by avahi, to mitigate against possible exploits bsc1154063. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE-SU-2020:2583-1 Security update for avahi

This update for avahi fixes the following issues: - When changing ownership of /var/lib/autoipd, only change ownership of files owned by avahi, to mitigate against possible exploits bsc1154063...

Scientific Linux Security Update : avahi on SL7.x x86_64 (20200407)

avahi: Multicast DNS responds to unicast queries outside of local network C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135799; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

EulerOS Virtualization 3.0.2.2 : avahi (EulerOS-SA-2020-1450)

According to the version of the avahi packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - avahi-daemon in Avahi through 0.6.32 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which...

Huawei EulerOS: Security Advisory for avahi (EulerOS-SA-2020-1450)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

dbus is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the D-Bus library handled endianness conversion when receiving messages. A local user could use this flaw to send a specially-crafted message to dbus-daemon or to a service using the bus, such as...

Denial Of Service (DoS)

avahi is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the Avahi daemon avahi-daemon processed multicast DNS mDNS packets with an empty payload. An attacker on the local network could use this flaw to cause avahi-daemon on a target system to enter an...

Denial Of Service (DoS)

Avahi is vulnerable to Denial Of Service DoS. Due to the way the Avahi daemon avahi-daemon processed Multicast DNS mDNS packets with corrupted checksums, an attacker on the local network could use this flaw to cause avahi-daemon on a target system to exit unexpectedly via specially-crafted mDNS...

Denial Of Service (DoS)

Avahi is vulnerable to Denial Of Service DoS. Due to the way avahi-daemon processed incoming unicast mDNS messages. if the mDNS reflector were enabled on a system, an attacker on the local network could send a specially-crafted unicast mDNS message to that system, resulting in its avahi-daemon...