Stay Secure with the Latest Linux Advisories

security advisoryhigh severityservice availability

Mageia 8: MGASA-2021-0339 High: Avahi Service Crash Threat

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability (CVE-2021-3502). . MGASA-2021-0339 - Updated avahi packages fix a security vulnerability Publication date: 10 Jul 2021 URL: https://advisories.mageia.org/MGASA-2021-0339.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-3502 A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability (CVE-2021-3502). References: - https://bugs.mageia.org/show_bug.cgi?id=29239 - https://ubuntu.com/security/notices/USN-5008-1 - https://www.cve.org/CVERecord?id=CVE-2021-3502 SRPMS: - 8/core/avahi-0.8-6.2.mga8 . Recent updates to avahi packages rectify a security vulnerability, significant for system stability. Discover the specifics of the correction and its potential impact.. Mageia Update, Avahi Security Fix, Service Availability Issue. . LinuxSecurity.com Team

Jul 10, 2021 Mageia