CVE-2023-38473

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared.

Security Fix(es):

A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.(CVE-2023-38471)

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.(CVE-2023-38472)

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.(CVE-2023-38473)

Root has patched CVE-2023-38473 in the avahi package for Root:Alpine:3.18. Multiple fixed versions available.

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

• avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468)
• avahi: Reachable assertion in avahi_dns_packet_append_record (CVE-2023-38469)
• avahi: Reachable assertion in avahi_escape_label (CVE-2023-38470)
• avahi: Reachable assertion in dbus_set_host_name (CVE-2023-38471)
• avahi: Reachable assertion in avahi_rdata_parse (CVE-2023-38472)
• avahi: Reachable assertion in avahi_alternative_host_name (CVE-2023-38473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

• avahi: Reachable assertion in avahi_dns_packet_append_record (CVE-2023-38469)
• avahi: Reachable assertion in avahi_escape_label (CVE-2023-38470)
• avahi: Reachable assertion in dbus_set_host_name (CVE-2023-38471)
• avahi: Reachable assertion in avahi_rdata_parse (CVE-2023-38472)
• avahi: Reachable assertion in avahi_alternative_host_name (CVE-2023-38473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

• CVE-2021-3468: handle termination event on avahi Unix socket to prevent infinite loop
• CVE-2023-1981: prevent avahi daemon crash by emitting an error if the requested D-Bus service is not found
• CVE-2021-3502: fix avahi-daemon crashing from NULL pointer assertions
• CVE-2023-38469: reject overly long TXT resource records to prevent reachable assertion in avahi_dns_packet_append_record
• CVE-2023-38470: ensure each label is at least one byte long in avahi_normalize_name() to prevent reachable assertion in avahi_escape_label()
• CVE-2023-38471: fix creating invalid escape sequence in dbus_set_host_name function
• CVE-2023-38472: ensure avahi_rdata_parse() has valid rdata before parsing to prevent reachable assertion
• CVE-2023-38473: normalize input in avahi_alternative_host_name() to prevent reachable assertion due to unescaped dot handling

The updated packages fix security vulnerabilities: A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. (CVE-2023-38469) A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function. (CVE-2023-38470) A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function. (CVE-2023-38471) A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function. (CVE-2023-38472) A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function. (CVE-2023-38473)

These are all security issues fixed in the avahi-0.8-26.1 package on the GA media of openSUSE Tumbleweed.

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

• avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468)

• avahi: Reachable assertion in avahi_dns_packet_append_record (CVE-2023-38469)

• avahi: Reachable assertion in avahi_escape_label (CVE-2023-38470)

• avahi: Reachable assertion in dbus_set_host_name (CVE-2023-38471)

• avahi: Reachable assertion in avahi_rdata_parse (CVE-2023-38472)

• avahi: Reachable assertion in avahi_alternative_host_name (CVE-2023-38473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This update for avahi fixes the following issues:

• CVE-2023-38473: Fixed a reachable assertion when parsing a host name (bsc#1216419).

This update for avahi fixes the following issues:

• CVE-2023-38470: Ensure each label is at least one byte long (bsc#1215947).
• CVE-2023-38473: Fixed a reachable assertion when parsing a host name (bsc#1216419).

This update for avahi fixes the following issues:

• CVE-2023-38473: Fixed a reachable assertion when parsing a host name (bsc#1216419).
• CVE-2023-38470: Fixed that each label is at least one byte long (bsc#1215947).

Evgeny Vereshchagin discovered that Avahi contained several reachable assertions, which could lead to intentional assertion failures when specially crafted user input was given. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-38469, CVE-2023-38470, CVE-2023-38471, CVE-2023-38472, CVE-2023-38473)