Lucene search

UbuntuUSN-6129-2

HistoryJul 25, 2023 - 12:00 a.m.

Avahi vulnerability

2023-07-2500:00:00

ubuntu.com

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6 Medium

AI Score

Confidence

High

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Releases

Ubuntu 18.04 ESM
Ubuntu 16.04 ESM
Ubuntu 14.04 ESM

Packages

avahi - IPv4LL network address configuration daemon

Details

USN-6129-1 fixed a vulnerability in Avahi. This update provides the
corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04
LTS.

Original advisory details:

It was discovered that Avahi incorrectly handled certain DBus messages. A
local attacker could possibly use this issue to cause Avahi to crash,
resulting in a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchavahi-daemon< 0.7-3.1ubuntu1.3+esm1UNKNOWN
Ubuntu18.04noarchavahi-autoipd< 0.7-3.1ubuntu1.3UNKNOWN
Ubuntu18.04noarchavahi-autoipd-dbgsym< 0.7-3.1ubuntu1.3UNKNOWN
Ubuntu18.04noarchavahi-daemon< 0.7-3.1ubuntu1.3UNKNOWN
Ubuntu18.04noarchavahi-daemon-dbgsym< 0.7-3.1ubuntu1.3UNKNOWN
Ubuntu18.04noarchavahi-discover< 0.7-3.1ubuntu1.3UNKNOWN
Ubuntu18.04noarchavahi-dnsconfd< 0.7-3.1ubuntu1.3UNKNOWN
Ubuntu18.04noarchavahi-dnsconfd-dbgsym< 0.7-3.1ubuntu1.3UNKNOWN
Ubuntu18.04noarchavahi-ui-utils< 0.7-3.1ubuntu1.3UNKNOWN
Ubuntu18.04noarchavahi-ui-utils-dbgsym< 0.7-3.1ubuntu1.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	18.04	noarch	avahi-daemon	< 0.7-3.1ubuntu1.3+esm1	UNKNOWN
Ubuntu	18.04	noarch	avahi-autoipd	< 0.7-3.1ubuntu1.3	UNKNOWN
Ubuntu	18.04	noarch	avahi-autoipd-dbgsym	< 0.7-3.1ubuntu1.3	UNKNOWN
Ubuntu	18.04	noarch	avahi-daemon	< 0.7-3.1ubuntu1.3	UNKNOWN
Ubuntu	18.04	noarch	avahi-daemon-dbgsym	< 0.7-3.1ubuntu1.3	UNKNOWN
Ubuntu	18.04	noarch	avahi-discover	< 0.7-3.1ubuntu1.3	UNKNOWN
Ubuntu	18.04	noarch	avahi-dnsconfd	< 0.7-3.1ubuntu1.3	UNKNOWN
Ubuntu	18.04	noarch	avahi-dnsconfd-dbgsym	< 0.7-3.1ubuntu1.3	UNKNOWN
Ubuntu	18.04	noarch	avahi-ui-utils	< 0.7-3.1ubuntu1.3	UNKNOWN
Ubuntu	18.04	noarch	avahi-ui-utils-dbgsym	< 0.7-3.1ubuntu1.3	UNKNOWN