Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ALAS-2023-1790

Related Vulnerabilities: CVE-2023-38469   CVE-2023-38470   CVE-2023-38471  

A reachable assertion was found in avahi_dns_packet_append_record. (CVE-2023-38469) A reachable assertion was found in avahi_escape_label. (CVE-2023-38470) A reachable assertion was found in dbus_set_host_name. (CVE-2023-38471)

Source

ALAS-2023-1790

Amazon Linux AMI Security Advisory: ALAS-2023-1790
Advisory Release Date: 2023-08-03 20:16 Pacific
Advisory Updated Date: 2023-08-08 20:48 Pacific
Severity: Medium
Issue Overview:

A reachable assertion was found in avahi_dns_packet_append_record. (CVE-2023-38469)

A reachable assertion was found in avahi_escape_label. (CVE-2023-38470)

A reachable assertion was found in dbus_set_host_name. (CVE-2023-38471)


Affected Packages:

avahi


Issue Correction:
Run yum update avahi to update your system.

New Packages:
i686:
    avahi-compat-howl-0.6.25-12.19.amzn1.i686
    avahi-devel-0.6.25-12.19.amzn1.i686
    avahi-gobject-devel-0.6.25-12.19.amzn1.i686
    avahi-dnsconfd-0.6.25-12.19.amzn1.i686
    avahi-autoipd-0.6.25-12.19.amzn1.i686
    avahi-gobject-0.6.25-12.19.amzn1.i686
    avahi-libs-0.6.25-12.19.amzn1.i686
    avahi-tools-0.6.25-12.19.amzn1.i686
    avahi-glib-0.6.25-12.19.amzn1.i686
    avahi-compat-libdns_sd-devel-0.6.25-12.19.amzn1.i686
    avahi-compat-libdns_sd-0.6.25-12.19.amzn1.i686
    avahi-glib-devel-0.6.25-12.19.amzn1.i686
    avahi-compat-howl-devel-0.6.25-12.19.amzn1.i686
    avahi-0.6.25-12.19.amzn1.i686
    avahi-debuginfo-0.6.25-12.19.amzn1.i686

src:
    avahi-0.6.25-12.19.amzn1.src

x86_64:
    avahi-glib-0.6.25-12.19.amzn1.x86_64
    avahi-tools-0.6.25-12.19.amzn1.x86_64
    avahi-gobject-0.6.25-12.19.amzn1.x86_64
    avahi-0.6.25-12.19.amzn1.x86_64
    avahi-compat-libdns_sd-0.6.25-12.19.amzn1.x86_64
    avahi-autoipd-0.6.25-12.19.amzn1.x86_64
    avahi-debuginfo-0.6.25-12.19.amzn1.x86_64
    avahi-libs-0.6.25-12.19.amzn1.x86_64
    avahi-devel-0.6.25-12.19.amzn1.x86_64
    avahi-compat-howl-0.6.25-12.19.amzn1.x86_64
    avahi-compat-howl-devel-0.6.25-12.19.amzn1.x86_64
    avahi-gobject-devel-0.6.25-12.19.amzn1.x86_64
    avahi-dnsconfd-0.6.25-12.19.amzn1.x86_64
    avahi-glib-devel-0.6.25-12.19.amzn1.x86_64
    avahi-compat-libdns_sd-devel-0.6.25-12.19.amzn1.x86_64

Additional References

Red Hat: CVE-2023-38469, CVE-2023-38470, CVE-2023-38471

Mitre: CVE-2023-38469, CVE-2023-38470, CVE-2023-38471

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook

Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started