CVE:CVE-2021-26720
CNNVD:CNNVD-202102-1312
Avahi是一套用于Linux的本地服务发现工具。
Debian avahi 中存在后置链接漏洞，该漏洞并允许本地攻击者通过对/run/avahi-daemon下的文件进行符号链接攻击来造成拒绝服务或创建任意空文件。
solution:Upgrade avahi avahi to a higher version than 0.8-4,and avoid the version (,0.8-4]; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0