Local Attack Vulnerability in Avahi Service by Vendor Linux

CVE-2021-3502

What is CVE-2021-3502?

A flaw exists in the Avahi service where the avahi_s_host_name_resolver_start function contains a reachable assertion. This vulnerability allows a local attacker to crash the Avahi service by making requests for hostname resolutions using invalid hostnames via the Avahi socket or D-Bus methods. The primary risk associated with this vulnerability pertains to the disruption of service availability, affecting users relying on the Avahi service for network service discovery.

References