Debian Security Advisory

DLA-3414-1 avahi -- LTS security update

Date Reported:
02 May 2023
Affected Packages:
avahi
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2023-1981.
More information:

It was discovered that there was a local Denial of Service (DoS) vulnerability in Avahi, a system that facilitates service discovery on a local network. The avahi-daemon process could have been crashed over the DBus message bus.

For Debian 10 Buster, this problem has been fixed in version 0.7-4+deb10u2.

We recommend that you upgrade your avahi packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS