REDHAT-BUG-1939614: Medium severity avahi autoip daemon vulnerability
A flaw was found in avahi deamon. Denial of service can be triggered by writing long lines to /run/avahi-daemon/socket resulting in an unresponsive busy-loop of the daemon.
References:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=984938
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1939614?
The severity of REDHAT-BUG-1939614 is categorized as a denial of service vulnerability due to the busy-loop condition it can create in the avahi daemon.
How do I fix REDHAT-BUG-1939614?
To fix REDHAT-BUG-1939614, you should upgrade to the latest version of the avahi-daemon that addresses this vulnerability.
What versions of avahi-daemon are affected by REDHAT-BUG-1939614?
All versions of avahi-daemon prior to the patch that resolves REDHAT-BUG-1939614 are considered affected.
What causes the vulnerability in REDHAT-BUG-1939614?
The vulnerability in REDHAT-BUG-1939614 is caused by the daemon entering a busy-loop state when long lines are written to /run/avahi-daemon/socket.
Is there a workaround for REDHAT-BUG-1939614?
A temporary workaround for REDHAT-BUG-1939614 can be implemented by restricting the input to the avahi-daemon socket to prevent writing excessively long lines.