CVE-2021-3468
Summary
| CVE | CVE-2021-3468 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-06-02 16:15:00 UTC |
|---|
| Updated | 2023-06-22 02:15:00 UTC |
|---|
| Description | A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| 1939614 – (CVE-2021-3468) CVE-2021-3468 avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket |
MISC |
bugzilla.redhat.com |
|
| [SECURITY] [DLA 3047-1] avahi security update |
MLIST |
lists.debian.org |
|
| [SECURITY] [DLA 3466-1] avahi security update |
MISC |
lists.debian.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 161082 Oracle Enterprise Linux Security Update for avahi (ELSA-2023-6707)
- 161245 Oracle Enterprise Linux Security Update for avahi (ELSA-2023-7836)
- 174987 SUSE Enterprise Linux Security Update for avahi (SUSE-SU-2021:1494-1)
- 174988 SUSE Enterprise Linux Security Update for avahi (SUSE-SU-2021:1493-1)
- 179359 Debian Security Update for avahi (DLA 3047-1)
- 184853 Debian Security Update for avahi (CVE-2021-3468)
- 198430 Ubuntu Security Notification for Avahi vulnerabilities (USN-5008-1)
- 242395 Red Hat Update for avahi (RHSA-2023:6707)
- 242623 Red Hat Update for avahi (RHSA-2023:7836)
- 242747 Red Hat Update for avahi (RHSA-2024:0418)
- 242797 Red Hat Update for avahi (RHSA-2024:0576)
- 296053 Oracle Solaris 11.4 Support Repository Update (SRU) 35.94.4 Missing (CPUJUL2021)
- 356756 Amazon Linux Security Advisory for avahi : ALAS2-2023-2372
- 379643 Alibaba Cloud Linux Security Update for avahi (ALINUX3-SA-2024:0035)
- 500042 Alpine Linux Security Update for avahi
- 501380 Alpine Linux Security Update for avahi
- 501728 Alpine Linux Security Update for avahi
- 503870 Alpine Linux Security Update for avahi
- 6000080 Debian Security Update for avahi (DLA 3466-1)
- 670594 EulerOS Security Update for avahi (EulerOS-SA-2021-2352)
- 670696 EulerOS Security Update for avahi (EulerOS-SA-2021-2454)
- 670734 EulerOS Security Update for avahi (EulerOS-SA-2021-2492)
- 670889 EulerOS Security Update for avahi (EulerOS-SA-2021-2352)
- 750101 SUSE Enterprise Linux Security Update for avahi (SUSE-SU-2021:1845-1)
- 750105 SUSE Enterprise Linux Security Update for avahi (SUSE-SU-2021:1494-2)
- 750109 SUSE Enterprise Linux Security Update for avahi (SUSE-SU-2021:1493-2)
- 750221 OpenSUSE Security Update for avahi (openSUSE-SU-2021:0694-1)
- 750789 OpenSUSE Security Update for avahi (openSUSE-SU-2021:1845-1)
- 901604 Common Base Linux Mariner (CBL-Mariner) Security Update for avahi (6324-1)
- 941371 AlmaLinux Security Update for avahi (ALSA-2023:6707)
- 941504 AlmaLinux Security Update for avahi (ALSA-2023:7836)
