CVE-2023-38472: Reachable assertion in avahi_rdata_parse
A reachable assertion was found in avahirdataparse.
References:
https://github.com/lathiat/avahi/issues/452
Other sources
A vulnerability was found in Avahi. A reachable assertion exists in the avahirdataparse() function.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/avahito a version that resolves this vulnerability.Fixed in 0.8-10+deb12u1 - Upgrade
Upgrade
debian/avahito a version that resolves this vulnerability.Fixed in 0.8-14 - Upgrade
Upgrade
debian/avahito a version that resolves this vulnerability.Fixed in 0.8-10+deb12u1Fixed in 0.8-16Fixed in 0.8-18
Event History
Frequently Asked Questions
What is CVE-2023-38472?
CVE-2023-38472 is a vulnerability found in Avahi where a reachable assertion exists in the avahi_rdata_parse() function.
How does CVE-2023-38472 impact Avahi?
CVE-2023-38472 can be exploited to trigger a reachable assertion in Avahi.
What is the severity of CVE-2023-38472?
CVE-2023-38472 has a severity rating of 6.2 (Medium).
Which software is affected by CVE-2023-38472?
Avahi versions up to and excluding 0.9, Redhat Enterprise Linux 8.0, and Redhat Enterprise Linux 9.0 are affected by CVE-2023-38472.
Is there a fix available for CVE-2023-38472?
Yes, a fix is available for CVE-2023-38472. Please refer to the references for more information.