CVE-2023-38470 — Reachable Assertion in Avahi

CWE-617 — Reachable Assertion9 documents8 sources
Severity
5.5MEDIUMNVD
CNA6.2
EPSS
0.0%
top 98.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
AvahiRedhat Enterprise Linux
Timeline
PublishedNov 2
Latest updateNov 20

Description

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶NVDavahi/avahi< 0.9
▶Debianavahi/avahi< 0.8-5+deb11u3+3
▶Ubuntuavahi/avahi< 0.7-4ubuntu7.3+4

Also affects: Enterprise Linux 8.0, 9.0

🔴Vulnerability Details

4
OSV
avahi vulnerabilities↗2023-11-20
▶
OSV
CVE-2023-38470: A vulnerability was found in Avahi↗2023-11-02
▶
CVEList
Reachable assertion in avahi_escape_label↗2023-11-02
▶
GHSA
GHSA-mg8v-g9mc-p4f8: A vulnerability was found in Avahi↗2023-11-02
▶

📋Vendor Advisories

4
Ubuntu
Avahi vulnerabilities↗2023-11-20
▶
Microsoft
Reachable assertion in avahi_escape_label↗2023-11-14
▶
Red Hat
avahi: Reachable assertion in avahi_escape_label↗2023-04-26
▶
Debian
CVE-2023-38470: avahi - A vulnerability was found in Avahi. A reachable assertion exists in the avahi_es...↗2023
▶
CVE-2023-38470 — Reachable Assertion in Avahi | cvebase