CVE-2023-38469 — Reachable Assertion in Avahi

CWE-617 — Reachable Assertion9 documents8 sources
Severity
5.5MEDIUMNVD
CNA6.2
EPSS
0.0%
top 98.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
AvahiRedhat Enterprise Linux
Timeline
PublishedNov 2
Latest updateNov 20

Description

A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶NVDavahi/avahi< 0.9
▶Debianavahi/avahi< 0.8-5+deb11u3+3
▶Ubuntuavahi/avahi< 0.7-4ubuntu7.3+4

Also affects: Enterprise Linux 8.0, 9.0

🔴Vulnerability Details

4
OSV
avahi vulnerabilities↗2023-11-20
▶
CVEList
Reachable assertion in avahi_dns_packet_append_record↗2023-11-02
▶
OSV
CVE-2023-38469: A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record↗2023-11-02
▶
GHSA
GHSA-cg96-q9gq-2pr7: A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record↗2023-11-02
▶

📋Vendor Advisories

4
Ubuntu
Avahi vulnerabilities↗2023-11-20
▶
Microsoft
Reachable assertion in avahi_dns_packet_append_record↗2023-11-14
▶
Red Hat
avahi: Reachable assertion in avahi_dns_packet_append_record↗2023-04-26
▶
Debian
CVE-2023-38469: avahi - A vulnerability was found in Avahi, where a reachable assertion exists in avahi_...↗2023
▶
CVE-2023-38469 — Reachable Assertion in Avahi | cvebase