{"id":"CVE-2021-36217","aliases":["ALPINE-CVE-2021-36217","EUVD-2021-22837","GHSA-r9vw-9gvx-7g72","OESA-2021-1273"],"status":"rejected","title":"Avahi 0.8 allows a local denial of service (NULL pointer dereference and daemon crash) against...","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3502. Reason: This candidate is a duplicate of CVE-2021-3502. Notes: All CVE users should reference CVE-2021-3502 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","from":"osv"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2021-07-07T17:58:55Z","modified":"2026-10-23T17:17:56Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"avahi","fixed_in":["0.8-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"avahi","fixed_in":["0.8-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"avahi","fixed_in":["0.8-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"avahi","fixed_in":["0.8-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"avahi","fixed_in":["0.8-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"avahi","fixed_in":["0.8-r5"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"avahi","fixed_in":["0.8-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"avahi","fixed_in":["0.8-5.oe1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-r5"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-5.oe1"}]}]}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36217","tags":["advisory"]},{"url":"https://github.com/lathiat/avahi/commit/9d31939e55280a733d930b15ac9e4dda4497680c"},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1188083"},{"url":"https://github.com/advisories/GHSA-r9vw-9gvx-7g72"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-36217","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1273","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-36217","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3502. Reason: This candidate is a duplicate of CVE-2021-3502. Notes: All CVE users should reference CVE-2021-3502 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2021-07-07T17:58:55Z","modified":"2021-08-09T12:09:07Z","updated_at":"2026-11-02T14:33:05.989686Z"}],"euvd":[{"id":"EUVD-2021-22837","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3502. Reason: This candidate is a duplicate of CVE-2021-3502. Notes: All CVE users should reference CVE-2021-3502 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2021-07-07T17:58:55Z","modified":"2021-08-09T12:09:07Z","updated_at":"2026-11-03T03:51:14.673364Z"}],"ghsa":[{"id":"GHSA-r9vw-9gvx-7g72","title":"Avahi 0.8 allows a local denial of service (NULL pointer dereference and daemon crash) against...","description":"Avahi 0.8 allows a local denial of service (NULL pointer dereference and daemon crash) against avahi-daemon via the D-Bus interface or a \"ping .local\" command.","status":"published","published":"2022-05-24T19:06:58Z","modified":"2023-01-30T05:00:37Z","cwes":["CWE-476"],"updated_at":"2026-11-02T14:46:14.46933Z"}],"nvd":[{"id":"CVE-2021-36217","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3502. Reason: This candidate is a duplicate of CVE-2021-3502. Notes: All CVE users should reference CVE-2021-3502 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2021-07-07T18:15:12.85Z","modified":"2023-11-07T03:36:44.057Z","updated_at":"2026-11-02T14:06:55.259633Z"}],"osv":[{"id":"OESA-2021-1273","title":"avahi security update","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared.\r\n\r\nSecurity Fix(es):\r\n\r\nAvahi 0.8 allows a local denial of service (NULL pointer dereference and daemon crash) against avahi-daemon via the D-Bus interface or a \u0026quot;ping .local\u0026quot; command.(CVE-2021-36217)","status":"published","published":"2021-07-24T11:04:30Z","modified":"2026-08-18T01:15:58.543641819Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"ALPINE-CVE-2021-36217","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3502. Reason: This candidate is a duplicate of CVE-2021-3502. Notes: All CVE users should reference CVE-2021-3502 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2021-07-07T18:15:12.85Z","modified":"2026-10-23T17:17:56.199250057Z","updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"CVE-2021-36217","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3502. Reason: This candidate is a duplicate of CVE-2021-3502. Notes: All CVE users should reference CVE-2021-3502 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2021-07-07T18:15:12Z","modified":"2026-04-10T04:35:28.040794Z","updated_at":"2026-11-02T15:44:20.434873Z"}]}}