CVE-2007-3372

LOW 2.1CVE-2007-3372 · Published 22/06/2007 · updated 16/06/2026

In short

CVE-2007-3372 is a LOW (CVSS 2.1) vulnerability affecting avahi (avahi).
Chance of exploitation in the next 30 days (EPSS): 0.40%, higher than 34.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
avahi avahi	`≤ 0.6.19`	No fix yet

Description

The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service (exit) via empty TXT data over D-Bus, which triggers an assert error.

References

avahi.org/changeset/1482
avahi.org/milestone/Avahi%200.6.20 · Patch
osvdb.org/37507
secunia.com/advisories/25811
secunia.com/advisories/26083
secunia.com/advisories/26791
secunia.com/advisories/33220
secunia.com/advisories/33279
debian.org/security/2008/dsa-1690
mandriva.com/security/advisories
novell.com/linux/security/advisories/2007_14_sr.html
securityfocus.com/archive/1/472443/100/0/threaded
securityfocus.com/bid/24614
securitytracker.com/id
ubuntu.com/usn/usn-696-1
vupen.com/english/advisories/2007/2317
exchange.xforce.ibmcloud.com/vulnerabilities/35036

More vulnerabilities in avahi

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free