avahi (SUSE:Linux Enterprise Module for Basesystem 15 SP5) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Basesystem 15 SP5 package avahi, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2023-38469 — CVSS 6.2 (medium): A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.
• CVE-2023-38470 — CVSS 6.2 (medium): A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.
• CVE-2023-38471 — CVSS 6.2 (medium): A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.
• CVE-2023-38472 — CVSS 6.2 (medium): A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.
• CVE-2023-38473 — CVSS 6.2 (medium): A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.
• CVE-2024-52616 — CVSS 5.3 (medium): A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them…