USN-6129-1: Avahi vulnerability

Releases

• Ubuntu 23.04
• Ubuntu 22.10
• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS

Packages

• avahi - IPv4LL network address configuration daemon

Details

It was discovered that Avahi incorrectly handled certain DBus messages. A
local attacker could possibly use this issue to cause Avahi to crash,
resulting in a denial of service.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 23.04

• avahi-daemon - 0.8-6ubuntu1.23.04.1

Ubuntu 22.10

• avahi-daemon - 0.8-6ubuntu1.22.10.1

Ubuntu 22.04

• avahi-daemon - 0.8-5ubuntu5.1

Ubuntu 20.04

• avahi-daemon - 0.7-4ubuntu7.2

In general, a standard system update will make all the necessary changes.

References

• CVE-2023-1981

Related notices

• USN-6129-2: avahi, libavahi-compat-libdnssd-dev, gir1.2-avahi-0.6, libavahi-client3, libavahi-common-data, libavahi-core-dev, libavahi-common-dev, python-avahi, libavahi-ui-gtk3-0, avahi-daemon, libavahi-ui0, libavahi-glib1, libavahi-client-dev, libavahi-qt4-1, avahi-discover, libavahi-core7, libavahi-gobject-dev, avahi-ui-utils, libavahi-ui-gtk3-dev, libavahi-ui-dev, avahi-dnsconfd, libavahi-qt4-dev, avahi-autoipd, libavahi-common3, libavahi-compat-libdnssd1, libavahi-gobject0, avahi-utils, libavahi-glib-dev