{
  "cveId": "CVE-2021-3502",
  "url": "https://patchblox.com/security/cve/CVE-2021-3502",
  "summary": "CVE-2021-3502 is fixed in 26 products on 1 platform, first by avahi-autoipd 0.8-5ubuntu4, released May 7, 2021. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "avahi: Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Netwo...",
  "description": "Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.\n\nSecurity Fix(es):\n\n* avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468)\n\n* avahi: reachable assertion in avahi_s_host_name_resolver_start when trying to resolve badly-formatted hostnames (CVE-2021-3502)\n\n* avahi: avahi-daemon can be crashed via DBus (CVE-2023-1981)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section.",
  "published": "2021-05-07T05:15:00Z",
  "severity": "Moderate",
  "cvss": 5.5,
  "epss": 0.00374,
  "epssPercentile": 0.3153,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "avahi",
      "release": "RHEL 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "RHSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi",
      "release": "almalinux 9",
      "fixedVersion": "0.8-15.el9",
      "fix": "ALSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi",
      "release": "ol 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "ELSA-2023-6707",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-6707",
      "released": "2023-11-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-autoipd",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "avahi-autoipd 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-avahi-autoipd-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-compat-howl",
      "release": "RHEL 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "RHSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-compat-howl",
      "release": "almalinux 9",
      "fixedVersion": "0.8-15.el9",
      "fix": "ALSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-compat-howl",
      "release": "ol 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "ELSA-2023-6707",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-6707",
      "released": "2023-11-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-compat-howl-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "RHSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-compat-howl-devel",
      "release": "almalinux 9",
      "fixedVersion": "0.8-15.el9",
      "fix": "ALSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-compat-howl-devel",
      "release": "ol 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "ELSA-2023-6707",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-6707",
      "released": "2023-11-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-compat-libdns_sd",
      "release": "RHEL 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "RHSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-compat-libdns_sd",
      "release": "almalinux 9",
      "fixedVersion": "0.8-15.el9",
      "fix": "ALSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-compat-libdns_sd",
      "release": "ol 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "ELSA-2023-6707",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-6707",
      "released": "2023-11-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-compat-libdns_sd-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "RHSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-compat-libdns_sd-devel",
      "release": "almalinux 9",
      "fixedVersion": "0.8-15.el9",
      "fix": "ALSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-compat-libdns_sd-devel",
      "release": "ol 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "ELSA-2023-6707",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-6707",
      "released": "2023-11-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-daemon",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "avahi-daemon 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-avahi-daemon-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "RHSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-devel",
      "release": "almalinux 9",
      "fixedVersion": "0.8-15.el9",
      "fix": "ALSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-devel",
      "release": "ol 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "ELSA-2023-6707",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-6707",
      "released": "2023-11-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-discover",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "avahi-discover 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-avahi-discover-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-dnsconfd",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "avahi-dnsconfd 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-avahi-dnsconfd-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-glib",
      "release": "RHEL 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "RHSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-glib",
      "release": "almalinux 9",
      "fixedVersion": "0.8-15.el9",
      "fix": "ALSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-glib",
      "release": "ol 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "ELSA-2023-6707",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-6707",
      "released": "2023-11-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-glib-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "RHSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-glib-devel",
      "release": "almalinux 9",
      "fixedVersion": "0.8-15.el9",
      "fix": "ALSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-glib-devel",
      "release": "ol 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "ELSA-2023-6707",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-6707",
      "released": "2023-11-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-libs",
      "release": "RHEL 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "RHSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-libs",
      "release": "almalinux 9",
      "fixedVersion": "0.8-15.el9",
      "fix": "ALSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-libs",
      "release": "ol 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "ELSA-2023-6707",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-6707",
      "released": "2023-11-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-tools",
      "release": "RHEL 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "RHSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-tools",
      "release": "almalinux 9",
      "fixedVersion": "0.8-15.el9",
      "fix": "ALSA-2023:6707",
      "url": "https://patchblox.com/security/fix/linux/alsa-2023-6707",
      "released": "2023-11-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-tools",
      "release": "ol 9",
      "fixedVersion": "0:0.8-15.el9",
      "fix": "ELSA-2023-6707",
      "url": "https://patchblox.com/security/fix/linux/elsa-2023-6707",
      "released": "2023-11-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-ui-utils",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "avahi-ui-utils 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-avahi-ui-utils-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "avahi-utils",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "avahi-utils 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-avahi-utils-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "gir1.2-avahi-0.6",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "gir1.2-avahi-0.6 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-gir1.2-avahi-0.6-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libavahi-client3",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "libavahi-client3 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libavahi-client3-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libavahi-common-data",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "libavahi-common-data 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libavahi-common-data-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libavahi-common3",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "libavahi-common3 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libavahi-common3-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libavahi-compat-libdnssd1",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "libavahi-compat-libdnssd1 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libavahi-compat-libdnssd1-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libavahi-core7",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "libavahi-core7 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libavahi-core7-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libavahi-glib1",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "libavahi-glib1 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libavahi-glib1-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libavahi-gobject0",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "libavahi-gobject0 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libavahi-gobject0-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libavahi-ui-gtk3-0",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "libavahi-ui-gtk3-0 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libavahi-ui-gtk3-0-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-avahi",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.8-5ubuntu4",
      "fix": "python3-avahi 0.8-5ubuntu4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-python3-avahi-0.8-5ubuntu4",
      "released": "2021-05-07T05:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}