Test ID:	1.3.6.1.4.1.25623.1.1.2.2021.2835
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for avahi (EulerOS-SA-2021-2835)
Summary:	The remote host is missing an update for the Huawei EulerOS 'avahi' package(s) announced via the EulerOS-SA-2021-2835 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'avahi' package(s) announced via the EulerOS-SA-2021-2835 advisory. Vulnerability Insight: A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.(CVE-2021-3468) Affected Software/OS: 'avahi' package(s) on Huawei EulerOS Virtualization for ARM 64 3.0.2.0. Solution: Please install the updated package(s). CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-3468 [debian-lts-announce] 20220607 [SECURITY] [DLA 3047-1] avahi security update https://lists.debian.org/debian-lts-announce/2022/06/msg00009.html https://bugzilla.redhat.com/show_bug.cgi?id=1939614 https://lists.debian.org/debian-lts-announce/2023/06/msg00028.html
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.