Skip to main content

Avahi CVE-2023-38470

MEDIUM
Reachable Assertion (CWE-617)
2023-11-02 secalert@redhat.com
Denial Of Service Avahi Enterprise Linux
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 02, 2023 - 15:15 nvd
MEDIUM 5.5

DescriptionNVD

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.

AnalysisAI

A vulnerability was found in Avahi. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-617. A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function. Affected products include: Avahi, Redhat Enterprise Linux.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Avahi

View all
CVE-2017-6519 CRITICAL POC
9.1 May 01

avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that a
CVE-2025-68471 MEDIUM POC
6.5 Jan 12

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2

CVE-2023-1981 MEDIUM POC
5.5 May 26

A vulnerability was found in the avahi library. Rated medium severity (CVSS 5.5), this vulnerability is low attack compl
CVE-2021-3502 MEDIUM POC
5.5 May 07

A flaw was found in avahi 0.8-5. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public e
CVE-2021-26720 HIGH
7.8 Feb 17

avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-d
CVE-2026-24401 MEDIUM
6.5 Jan 24

Avahi daemon versions 0.9rc2 and below can be remotely crashed through a denial of service attack by sending a specially
CVE-2025-68468 MEDIUM
6.5 Jan 12

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2

CVE-2025-68276 MEDIUM
5.5 Jan 12

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2

CVE-2023-38473 MEDIUM
5.5 Nov 02

A vulnerability was found in Avahi. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No ve
CVE-2023-38472 MEDIUM
5.5 Nov 02

A vulnerability was found in Avahi. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No ve
CVE-2023-38471 MEDIUM
5.5 Nov 02

A vulnerability was found in Avahi. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No ve
CVE-2023-38469 MEDIUM
5.5 Nov 02

A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. Rated medium s

Same weakness CWE-617 – Reachable Assertion

View all
CVE-2016-8864 HIGH
7.5
CVE-2020-12417 HIGH POC
8.8
CVE-2020-6623 HIGH POC
8.8
CVE-2020-6619 HIGH POC
8.8
CVE-2020-6617 HIGH POC
8.8
CVE-2023-37023 HIGH POC
8.6
CVE-2023-37021 HIGH POC
8.6
CVE-2023-37020 HIGH POC
8.6

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2023-38470 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy