CVE catalog

CVE-2023-1981

avahi: CVE-2023-1981

[CVE catalog]

Severity
Medium · CVSS 6.2CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.39% · Oct 25, 2026

A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash. avahi: avahi-daemon can be crashed via DBus The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianavahisid0.8-18fixed
Debianavahiforky0.8-18fixed
Debianavahitrixie0.8-16fixed
Debianavahibookworm0.8-10+deb12u1fixed
Alpineavahi3.190.8-r14fixed
Alpineavahi3.200.8-r14fixed
Alpineavahi3.210.8-r14fixed
Alpineavahi3.220.8-r14fixed
Alpineavahi3.230.8-r14fixed
Alpineavahi3.240.8-r14fixed
Ubuntuavahipro0.6.32-1ubuntu1vulnerable
Ubuntuavahipro0.7-3ubuntu1vulnerable
Ubuntuavahipro0.7-3ubuntu2vulnerable
Ubuntuavahipro0.7-3.1ubuntu1vulnerable
Ubuntuavahipro0.7-3.1ubuntu1.1vulnerable
Ubuntuavahipro0.7-3.1ubuntu1.2vulnerable
Ubuntuavahipro0.7-3.1ubuntu1.3vulnerable
Ubuntuavahipro0.7-3.1ubuntu1.3+esm1fixed
Ubuntuavahipro0.6.32-1ubuntu1vulnerable
Ubuntuavahipro0.7-3ubuntu1vulnerable
Ubuntuavahipro0.7-3ubuntu2vulnerable
Ubuntuavahipro0.7-3.1ubuntu1vulnerable
Ubuntuavahipro0.7-3.1ubuntu1.1vulnerable
Ubuntuavahipro0.7-3.1ubuntu1.2vulnerable
Ubuntuavahipro0.7-3.1ubuntu1.3vulnerable
Ubuntuavahipro0.7-3.1ubuntu1.3+esm1fixed
Ubuntuavahi20.040.7-4ubuntu5vulnerable
Ubuntuavahi20.040.7-4ubuntu6vulnerable
Ubuntuavahi20.040.7-4ubuntu7vulnerable
Ubuntuavahi20.040.7-4ubuntu7.1vulnerable
Ubuntuavahi20.040.7-4ubuntu7.2fixed
Ubuntuavahi22.040.8-5ubuntu4vulnerable
Ubuntuavahi22.040.8-5ubuntu5vulnerable
Ubuntuavahi22.040.8-5ubuntu5.1fixed
Ubuntuavahi20.040.7-4ubuntu5vulnerable
Ubuntuavahi20.040.7-4ubuntu6vulnerable
Ubuntuavahi20.040.7-4ubuntu7vulnerable
Ubuntuavahi20.040.7-4ubuntu7.1vulnerable
Ubuntuavahi20.040.7-4ubuntu7.2fixed
Ubuntuavahi22.040.8-5ubuntu4vulnerable
Ubuntuavahi22.040.8-5ubuntu5vulnerable
Ubuntuavahi22.040.8-5ubuntu5.1fixed
Suseavahilinux enterprise real time 15 sp30.7-150100.3.24.1fixed
Suseavahi-glib2linux enterprise real time 15 sp30.7-150100.3.24.1fixed
Suseavahilinux enterprise micro 5.20.7-150100.3.24.1fixed
Opensuseavahi-glib2leap 15.40.7-150100.3.24.1fixed
Opensuseavahitumbleweed0.8-23.1fixed
Suseavahilinux enterprise software development kit 12 sp50.6.32-32.18.1fixed
Suseavahi-glib2linux enterprise software development kit 12 sp50.6.32-32.18.1fixed
Suseavahilinux enterprise server 12 sp50.6.32-32.18.1fixed
Suseavahi-glib2linux enterprise server 12 sp50.6.32-32.18.1fixed
Suseavahilinux enterprise server for sap applications 12 sp50.6.32-32.18.1fixed
Suseavahi-glib2linux enterprise server for sap applications 12 sp50.6.32-32.18.1fixed
Suseavahi-glib2linux enterprise workstation extension 12 sp50.6.32-32.18.1fixed
Suseavahilinux enterprise micro 5.30.8-150400.7.3.1fixed
Suseavahilinux enterprise micro 5.40.8-150400.7.3.1fixed
Suseavahilinux enterprise module for basesystem 15 sp40.8-150400.7.3.1fixed
Suseavahi-glib2linux enterprise module for basesystem 15 sp40.8-150400.7.3.1fixed
Suseavahilinux enterprise module for desktop applications 15 sp40.8-150400.7.3.1fixed
Suseavahi-glib2linux enterprise module for desktop applications 15 sp40.8-150400.7.3.1fixed
Suseavahilinux enterprise module for package hub 15 sp40.8-150400.7.3.1fixed
Opensuseavahileap micro 5.30.8-150400.7.3.1fixed
Opensuseavahileap 15.40.8-150400.7.3.1fixed
Opensuseavahi-glib2leap 15.40.8-150400.7.3.1fixed
Opensuseavahi-qt5leap 15.40.8-150400.7.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianavahisourcesid0.8-10not yet assignedNot reported[1034594]
Debianavahisourceforky0.8-10not yet assignedNot reported[1034594]
Debianavahisourcetrixie0.8-10not yet assignedNot reported[1034594]
Debianavahisourcebookworm0.8-10not yet assignedNot reported[1034594]
Alpineavahiapk3.190.8-r14Not reportedALPINE-CVE-2023-1981Not reported
Alpineavahiapk3.200.8-r14Not reportedALPINE-CVE-2023-1981Not reported
Alpineavahiapk3.210.8-r14Not reportedALPINE-CVE-2023-1981Not reported
Alpineavahiapk3.220.8-r14Not reportedALPINE-CVE-2023-1981Not reported
Alpineavahiapk3.230.8-r14Not reportedALPINE-CVE-2023-1981Not reported
Alpineavahiapk3.240.8-r14Not reportedALPINE-CVE-2023-1981Not reported
Ubuntuavahidebpro0.7-3.1ubuntu1.3+esm1Not reportedUSN-6129-2Not reported
Ubuntuavahidebpro0.7-3.1ubuntu1.3+esm1Not reportedUBUNTU-CVE-2023-1981Not reported
Ubuntuavahideb20.040.7-4ubuntu7.2Not reportedUBUNTU-CVE-2023-1981Not reported
Ubuntuavahideb22.040.8-5ubuntu5.1Not reportedUBUNTU-CVE-2023-1981Not reported
Ubuntuavahideb20.040.7-4ubuntu7.2Not reportedUSN-6129-1Not reported
Ubuntuavahideb22.040.8-5ubuntu5.1Not reportedUSN-6129-1Not reported
Suseavahirpmlinux enterprise real time 15 sp30.7-150100.3.24.1Not reportedSUSE-SU-2023:1993-1Not reported
Suseavahi-glib2rpmlinux enterprise real time 15 sp30.7-150100.3.24.1Not reportedSUSE-SU-2023:1993-1Not reported
Suseavahirpmlinux enterprise micro 5.20.7-150100.3.24.1Not reportedSUSE-SU-2023:1993-1Not reported
Opensuseavahi-glib2rpmleap 15.40.7-150100.3.24.1Not reportedSUSE-SU-2023:1993-1Not reported
Opensuseavahirpmtumbleweed0.8-23.1Not reportedOPENSUSE-SU-2024:12854-1Not reported
Suseavahirpmlinux enterprise software development kit 12 sp50.6.32-32.18.1Not reportedSUSE-SU-2023:1956-1Not reported
Suseavahi-glib2rpmlinux enterprise software development kit 12 sp50.6.32-32.18.1Not reportedSUSE-SU-2023:1956-1Not reported
Suseavahirpmlinux enterprise server 12 sp50.6.32-32.18.1Not reportedSUSE-SU-2023:1956-1Not reported
Suseavahi-glib2rpmlinux enterprise server 12 sp50.6.32-32.18.1Not reportedSUSE-SU-2023:1956-1Not reported
Suseavahirpmlinux enterprise server for sap applications 12 sp50.6.32-32.18.1Not reportedSUSE-SU-2023:1956-1Not reported
Suseavahi-glib2rpmlinux enterprise server for sap applications 12 sp50.6.32-32.18.1Not reportedSUSE-SU-2023:1956-1Not reported
Suseavahi-glib2rpmlinux enterprise workstation extension 12 sp50.6.32-32.18.1Not reportedSUSE-SU-2023:1956-1Not reported
Suseavahirpmlinux enterprise micro 5.30.8-150400.7.3.1Not reportedSUSE-SU-2023:1994-1Not reported
Suseavahirpmlinux enterprise micro 5.40.8-150400.7.3.1Not reportedSUSE-SU-2023:1994-1Not reported
Suseavahirpmlinux enterprise module for basesystem 15 sp40.8-150400.7.3.1Not reportedSUSE-SU-2023:1994-1Not reported
Suseavahi-glib2rpmlinux enterprise module for basesystem 15 sp40.8-150400.7.3.1Not reportedSUSE-SU-2023:1994-1Not reported
Suseavahirpmlinux enterprise module for desktop applications 15 sp40.8-150400.7.3.1Not reportedSUSE-SU-2023:1994-1Not reported
Suseavahi-glib2rpmlinux enterprise module for desktop applications 15 sp40.8-150400.7.3.1Not reportedSUSE-SU-2023:1994-1Not reported
Suseavahirpmlinux enterprise module for package hub 15 sp40.8-150400.7.3.1Not reportedSUSE-SU-2023:1994-1Not reported
Opensuseavahirpmleap micro 5.30.8-150400.7.3.1Not reportedSUSE-SU-2023:1994-1Not reported
Opensuseavahirpmleap 15.40.8-150400.7.3.1Not reportedSUSE-SU-2023:1994-1Not reported
Opensuseavahi-glib2rpmleap 15.40.8-150400.7.3.1Not reportedSUSE-SU-2023:1994-1Not reported
Opensuseavahi-qt5rpmleap 15.40.8-150400.7.3.1Not reportedSUSE-SU-2023:1994-1Not reported

[Debian bug #1034594]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]