CVE-2023-1981

Name	CVE-2023-1981
Description	A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-3414-1, DLA-3990-1
Debian Bugs	1034594

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
avahi (PTS)	bookworm	0.8-10+deb12u1	fixed
	trixie	0.8-16	fixed
	forky, sid	0.8-18	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
avahi	source	buster	0.7-4+deb10u2	DLA-3414-1
avahi	source	bullseye	0.8-5+deb11u3	DLA-3990-1
avahi	source	(unstable)	0.8-10		1034594

Notes

https://github.com/avahi/avahi/issues/375
https://github.com/avahi/avahi/pull/407
https://github.com/avahi/avahi/commit/a2696da2f2c50ac43b6c4903f72290d5c3fa9f6f