avahi-compat-howl (AlmaLinux:9) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:9 package avahi-compat-howl, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (9)

• CVE-2023-38471 — CVSS 6.2 (medium): A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.
• CVE-2023-38472 — CVSS 6.2 (medium): A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.
• CVE-2023-38473 — CVSS 6.2 (medium): A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.
• CVE-2023-38469 — CVSS 6.2 (medium): A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.
• CVE-2023-38470 — CVSS 6.2 (medium): A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.
• CVE-2021-3468 — CVSS 5.5 (medium): A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix…
• CVE-2021-3502 — CVSS 5.5 (medium): A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to…
• CVE-2023-1981 — CVSS 5.5 (medium): A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to…
• CVE-2024-52616 — CVSS 5.3 (medium): A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them…