CVE-2021-3468

Name of the Vulnerable Software and Affected Versions Avahi versions 0.6 up to 0.8

Description The issue is related to the client work function in the Avahi service discovery system, which can lead to an infinite loop due to a condition with no exit. This can be exploited by an attacker to cause a denial of service. The flaw is in the handling of the event that signals the termination of the client connection on the Avahi Unix socket. When triggered, it allows a local attacker to make the Avahi service unresponsive.

Recommendations For Avahi versions 0.6 up to 0.8, as a temporary workaround, consider disabling the client work function until a patch is available. Restrict access to the Avahi Unix socket to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.