CVE-2023-1981 is a medium-severity vulnerability in the Avahi library, affecting Avahi and related Red Hat and Fedora products. An unprivileged local user can trigger a denial-of-service by making a D-Bus call, causing the Avahi daemon to crash. The attack requires local access and has low complexity, resulting in high availability impact but no confidentiality or integrity compromise. There is currently no public exploit code, active exploitation, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
0.7-20CPE matchmatch criteria | cpe:2.3:a:avahi:avahi:0.7-20:*:*:*:*:*:*:* | ||
37CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
CVE-2023-1981
Dec 10, 2024CVE-2023-1981
Nov 12, 2024A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call causing the avahi daemon to crash.
May 9, 2023avahi: avahi-daemon can be crashed via DBus
Apr 26, 2022