avahi-compat-howl (AlmaLinux:8) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:8 package avahi-compat-howl, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (7)

• CVE-2023-38470 — CVSS 6.2 (medium): A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.
• CVE-2023-38472 — CVSS 6.2 (medium): A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.
• CVE-2023-38473 — CVSS 6.2 (medium): A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.
• CVE-2023-38469 — CVSS 6.2 (medium): A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.
• CVE-2023-38471 — CVSS 6.2 (medium): A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.
• CVE-2023-1981 — CVSS 5.5 (medium): A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to…
• CVE-2021-3468 — CVSS 5.5 (medium): A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix…