Ubuntu 23.04: USN-6129-1 Moderate: Avahi Denial Of Service Risk

ubuntu

June 1, 2023

Avahi could be made to crash if it received specially crafted DBus traffic.

Summary

Avahi could be made to crash if it received specially crafted DBus traffic.

Software Description:

- avahi: IPv4LL network address configuration daemon

Details:

It was discovered that Avahi incorrectly handled certain DBus messages. A

local attacker could possibly use this issue to cause Avahi to crash,

resulting in a denial of service.

Topics Covered

security advisory denial of service software update Ubuntu avahi DBus issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
   avahi-daemon                    0.8-6ubuntu1.23.04.1

Ubuntu 22.10:
   avahi-daemon                    0.8-6ubuntu1.22.10.1

Ubuntu 22.04 LTS:
   avahi-daemon                    0.8-5ubuntu5.1

Ubuntu 20.04 LTS:
   avahi-daemon                    0.7-4ubuntu7.2

In general, a standard system update will make all the necessary changes.