avahi (SUSE:Linux Enterprise Module for Basesystem 15 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Basesystem 15 SP4 package avahi, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2023-38470 — CVSS 6.2 (medium): A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.
• CVE-2023-38472 — CVSS 6.2 (medium): A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.
• CVE-2023-38473 — CVSS 6.2 (medium): A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.
• CVE-2023-1981 — CVSS 5.5 (medium): A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to…