Lucene search
Veracode Vulnerability DatabaseVERACODE:45895HistoryMar 17, 2024 - 4:33 p.m.
Reachable Assertion
2024-03-1716:33:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
avahi
reachable assertion
dbus_set_host_name
vulnerability
software
6.2 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
Avahi is vulnerable to Reachable Assertion. the vulnerability is due to a reachable assertion in the dbus_set_host_name function.
| CPE | Name | Operator | Version |
|---|---|---|---|
| avahi:3.19 | eq | 0.8-r13 | |
| avahi:edge | eq | 0.8-r14 | |
| avahi:edge | eq | 0.8-r8 | |
| avahi:edge | eq | 0.8-r5 | |
| avahi:edge | eq | 0.8-r6 | |
| avahi:edge | eq | 0.8-r11 | |
| avahi:edge | eq | 0.8-r0 | |
| avahi:edge | eq | 0.8-r13 | |
| avahi:edge | eq | 0.8-r9 | |
| avahi:edge | eq | 0.8-r3 |
Related
osv
osv
CVE-2023-38471
2023-11-02 15:15:08
avahi vulnerabilities
2023-11-20 15:29:03
Moderate: avahi security update
2024-04-30 00:00:00
debiancve
debiancve
CVE-2023-38471
2023-11-02 15:15:08
cve
cve
CVE-2023-38471
2023-11-02 15:15:08
prion
prion
Authentication flaw
2023-11-02 15:15:00
alpinelinux
alpinelinux
CVE-2023-38471
2023-11-02 15:15:08
cgr
cgr
CVE-2023-38471 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2023-38471
2023-07-18 12:08:00
nvd
nvd
CVE-2023-38471
2023-11-02 15:15:08
cvelist
cvelist
CVE-2023-38471 Reachable assertion in dbus_set_host_name
2023-11-02 14:58:22
ubuntucve
ubuntucve
CVE-2023-38471
2023-11-02 00:00:00
wolfi
wolfi
CVE-2023-38471 vulnerabilities
2024-07-05 21:08:40
nessus
nessus
SUSE SLED12 / SLES12 Security Update : avahi (SUSE-SU-2024:1008-1)
2024-03-28 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:1008-1)
2024-05-07 00:00:00
Huawei EulerOS: Security Advisory for avahi (EulerOS-SA-2024-1116)
2024-01-29 00:00:00
Huawei EulerOS: Security Advisory for avahi (EulerOS-SA-2024-1451)
2024-03-21 00:00:00
amazon
amazon
Medium: avahi
2023-08-03 18:09:00
Medium: avahi
2023-08-03 20:16:00
redhat
redhat
(RHSA-2024:2433) Moderate: avahi security update
2024-04-30 06:15:41
(RHSA-2024:0418) Moderate: avahi security update
2024-01-24 14:40:25
(RHSA-2023:7836) Moderate: avahi security update
2023-12-14 08:16:14
almalinux
almalinux
Moderate: avahi security update
2024-04-30 00:00:00
Moderate: avahi security update
2023-12-14 00:00:00
oraclelinux
oraclelinux
avahi security update
2024-05-03 00:00:00
avahi security update
2023-12-15 00:00:00
mageia
mageia
Updated avahi packages fix security vulnerabilities
2024-01-25 14:21:08
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service due to multiple CVEs in Avahi
2023-07-28 14:38:12
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues
2024-05-07 17:07:44
Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps
2024-01-31 19:31:55
ubuntu
ubuntu
Avahi vulnerabilities
2023-11-20 00:00:00
rocky
rocky
avahi security update
2024-01-09 04:07:32
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
6.2 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
Related for VERACODE:45895