Every CVE Search/ Get API key

CVE-2025-68471

Avahi has a reachable assertion in lookup_start

6.5 MediumFix available

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.40%Up 0.4 points since Jan 13, 2026
90%50%10%1%

What each source reports

CVE List Score used 6.5

Avahi has a reachable assertion in lookup_start

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.

Record
CVE-2025-68471
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-617
Updated
2026-11-02
EUVDEUVD-2025-206278 6.5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.

Record
EUVD-2025-206278
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
NVD 6.5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.

Record
CVE-2025-68471
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-617
Updated
2026-11-02
OSVALPINE-CVE-2025-68471 6.5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.

Record
ALPINE-CVE-2025-68471
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2025-68471 6.5
Record
BELL-CVE-2025-68471
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 6.5

Avahi has a reachable assertion in lookup_start

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.

Record
CVE-2025-68471
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-617
Updated
2026-11-02
Show 20 moreShow less
OSVDEBIAN-CVE-2025-68471 6.5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.

Record
DEBIAN-CVE-2025-68471
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1236 6.5

avahi security update

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared.

Security Fix(es):

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus. This can be done by either calling the RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.(CVE-2025-68276)

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs. As soon as they expire avahi-daemon crashes.(CVE-2025-68468)

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.(CVE-2025-68471)

Record
OESA-2026-1236
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:11316 6.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:11316
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-68471 6.5

CVE-2025-68471 in avahi - Patched by Root

Root has patched CVE-2025-68471 in the avahi package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2025-68471
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2025-68471 6.5

CVE-2025-68471 in avahi - Patched by Root

Root has patched CVE-2025-68471 in the avahi package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2025-68471
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-68471 6.5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.

Record
UBUNTU-CVE-2025-68471
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-74277 No score

CVE-2025-68471 affecting package avahi for versions less than 0.8-5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.

Record
AZL-74277
Updated
2026-11-02
OSVAZL-74291 No score

CVE-2025-68471 affecting package avahi for versions less than 0.8-6

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.

Record
AZL-74291
Updated
2026-11-05
OSVCLSA-2026-1786027278 No score

avahi: Fix of 4 CVEs

  • CVE-2025-68468: fix remote denial of service via crafted mDNS CNAME announcements (assertion failure in lookup_multicast_callback)
  • CVE-2025-68471: fix remote denial of service via unsolicited CNAME announcements (assertion failure in lookup_start)
  • CVE-2025-68276: fix local denial of service via D-Bus record browsers using AVAHI_LOOKUP_USE_WIDE_AREA when wide-area is disabled
  • CVE-2026-34933: fix local denial of service via D-Bus publish flags setting both AVAHI_PUBLISH_USE_WIDE_AREA and AVAHI_PUBLISH_USE_MULTICAST
Record
CLSA-2026-1786027278
Updated
2026-11-02
OSVMGASA-2026-0016 No score

Updated avahi packages fix security vulnerabilities

Avahi has a reachable assertion in avahi_wide_area_scan_cache. (CVE-2025-68276) Avahi has a reachable assertion in lookup_multicast_callback. (CVE-2025-68468) Avahi has a reachable assertion in lookup_start. (CVE-2025-68471)

Record
MGASA-2026-0016
Updated
2026-11-02
OSVopenSUSE-SU-2026:10052-1 No score

avahi-0.8-41.1 on GA media

These are all security issues fixed in the avahi-0.8-41.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10052-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20110-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2025-68276: Fixed refuse to create wide-area record browsers when wide-area is off (bsc#1256498)
  • CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500)
  • CVE-2025-68468: Fixed DoS bug by removing incorrect assertion (bsc#1256499)
Record
openSUSE-SU-2026:20110-1
Updated
2026-11-02
OSVSUSE-SU-2026:0143-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2025-68276: avahi: reachable assertion in avahi_wide_area_scan_cache can lead to crash of avahi-daemon (bsc#1256498).
  • CVE-2025-68468: avahi: reachable assertion in lookup_multicast_callback can lead to crash of avahi-daemon (bsc#1256499).
  • CVE-2025-68471: avahi: reachable assertion in lookup_start can lead to crash of avahi-daemon (bsc#1256500).
Record
SUSE-SU-2026:0143-1
Updated
2026-11-02
OSVSUSE-SU-2026:0259-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2025-68276: Fixed refuse to create wide-area record browsers when wide-area is off (bsc#1256498)
  • CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500)
  • CVE-2025-68468: Fixed DoS bug by removing incorrect assertion (bsc#1256499)
Record
SUSE-SU-2026:0259-1
Updated
2026-11-02
OSVSUSE-SU-2026:0422-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2025-68276: avahi: reachable assertion in avahi_wide_area_scan_cache can lead to crash of avahi-daemon (bsc#1256498).
  • CVE-2025-68468: avahi: reachable assertion in lookup_multicast_callback can lead to crash of avahi-daemon (bsc#1256499).
  • CVE-2025-68471: avahi: reachable assertion in lookup_start can lead to crash of avahi-daemon (bsc#1256500).
Record
SUSE-SU-2026:0422-1
Updated
2026-11-02
OSVSUSE-SU-2026:0577-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2025-68276: Fixed refuse to create wide-area record browsers when wide-area is off (bsc#1256498)
  • CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500)
  • CVE-2025-68468: Fixed DoS bug by removing incorrect assertion (bsc#1256499)
Record
SUSE-SU-2026:0577-1
Updated
2026-11-02
OSVSUSE-SU-2026:20145-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2025-68276: Fixed refuse to create wide-area record browsers when wide-area is off (bsc#1256498)
  • CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500)
  • CVE-2025-68468: Fixed DoS bug by removing incorrect assertion (bsc#1256499)
Record
SUSE-SU-2026:20145-1
Updated
2026-11-02
OSVSUSE-SU-2026:20167-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2025-68276: Fixed refuse to create wide-area record browsers when wide-area is off (bsc#1256498)
  • CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500)
  • CVE-2025-68468: Fixed DoS bug by removing incorrect assertion (bsc#1256499)
Record
SUSE-SU-2026:20167-1
Updated
2026-11-02
OSVSUSE-SU-2026:20525-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2024-52615: Resolve fixed source ports for wide-area DNS queries cause DNS responses be injected. (bsc#1233421)
  • CVE-2025-68468: Fixed DoS bug by removing incorrect assertion. (bsc#1256499)
  • CVE-2025-68471: Fixed DoS bug by changing assert to return. (bsc#1256500)
  • CVE-2025-68276: Refuse to create wide-area record browsers when wide-area is off. (bsc#1256498)
Record
SUSE-SU-2026:20525-1
Updated
2026-11-02
OSVSUSE-SU-2026:21445-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2025-68276: reachable assertion in avahi_wide_area_scan_cache can lead to an avahi-daemon crash (bsc#1256498).
  • CVE-2025-68468: reachable assertion in lookup_multicast_callback can lead to an avahi-daemon crash (bsc#1256499).
  • CVE-2025-68471: reachable assertion in lookup_start can lead to an avahi-daemon crash (bsc#1256500).
Record
SUSE-SU-2026:21445-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
avahi
Alpine:v3.24
 before 0.8-r25
0.8-r25
avahi
Azure Linux:2
 before 0.8-5
0.8-5
avahi
Azure Linux:3
 before 0.8-6
0.8-6
avahi
Alpaquita:stream
 0.8-r5 up to 0.8-r25
0.8-r25
avahi
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-autoipd
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-compat-howl
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-compat-howl-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-compat-libdns_sd
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-compat-libdns_sd-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
Show 87 moreShow less
Affected packages
PackageAffectedFixed
avahi-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-dnsconfd
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-glib
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-glib-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-gobject
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-gobject-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-libs
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-qt3
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-qt3-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-qt4
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-qt4-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-tools
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-ui
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-ui-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-ui-gtk3
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-ui-tools
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi
Debian:12
 All versions, plus listed versions
0.8-100.8-10+deb12u10.8-110.8-120.8-13
Show 5 moreShow less
0.8-140.8-150.8-160.8-170.8-18
 None known
avahi
Debian:13
 All versions, plus listed versions
0.8-160.8-170.8-18
 None known
avahi
Debian:14
 before 0.8-18, plus listed versions
0.8-160.8-17
0.8-18
avahi
Mageia:9
From an advisory covering 3 CVEs
 before 0.8-10.3.mga9
0.8-10.3.mga9
avahi
openEuler:20.03-LTS-SP4
From an advisory covering 3 CVEs
 before 0.8-15.oe2003sp4
0.8-15.oe2003sp4
avahi
openEuler:22.03-LTS-SP4
From an advisory covering 3 CVEs
 before 0.8-25.oe2203sp4
0.8-25.oe2203sp4
avahi
openEuler:24.03-LTS
From an advisory covering 3 CVEs
 before 0.8-25.oe2403sp3
0.8-25.oe2403sp3
avahi
openEuler:24.03-LTS-SP1
From an advisory covering 3 CVEs
 before 0.8-25.oe2403sp1
0.8-25.oe2403sp1
avahi
openEuler:24.03-LTS-SP2
From an advisory covering 3 CVEs
 before 0.8-25.oe2403sp2
0.8-25.oe2403sp2
avahi
openEuler:24.03-LTS-SP3
From an advisory covering 3 CVEs
 before 0.8-25.oe2403sp3
0.8-25.oe2403sp3
avahi
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-autoipd
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-compat-howl
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-compat-howl-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-compat-libdns_sd
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-compat-libdns_sd-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-dnsconfd
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-glib
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-glib-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-gobject
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-gobject-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-libs
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-qt3
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-qt3-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-qt4
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-qt4-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-qt5
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-qt5-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-sharp
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-tools
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-ui
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-ui-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-ui-gtk3
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-ui-sharp
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-ui-sharp-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-ui-tools
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi
Root:Debian:12
 before 0.8-10+deb12u1.root.io.11
0.8-10+deb12u1.root.io.110.8-10+deb12u1.root.io.100.8-10+deb12u1.root.io.120.8-10+deb12u1.aikido.13
rootio-avahi
Root:Debian:12
 before 0.8-10+deb12u1.root.io.11
0.8-10+deb12u1.root.io.110.8-10+deb12u1.root.io.100.8-10+deb12u1.root.io.120.8-10+deb12u1.aikido.13
avahi
Root:Debian:13
 before 0.8-16.aikido.7
0.8-16.aikido.70.8-16.root.io.20.8-16.root.io.30.8-16.root.io.40.8-16.root.io.50.8-16.root.io.60.8-16.aikido.8
rootio-avahi
Root:Debian:13
 before 0.8-16.aikido.7
0.8-16.aikido.70.8-16.root.io.20.8-16.root.io.30.8-16.root.io.40.8-16.root.io.50.8-16.root.io.60.8-16.aikido.8
avahi
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 3 CVEs
 before 0.7-150100.3.46.1
0.7-150100.3.46.1
avahi
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
 before 0.8-150600.15.12.1
0.8-150600.15.12.1
avahi-glib2
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
 before 0.8-150600.15.12.1
0.8-150600.15.12.1
avahi
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 3 CVEs
 before 0.8-150600.15.12.1
0.8-150600.15.12.1
avahi-glib2
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 3 CVEs
 before 0.8-150600.15.12.1
0.8-150600.15.12.1
avahi
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 3 CVEs
 before 0.8-150600.15.12.1
0.8-150600.15.12.1
avahi
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 0.8-150600.15.12.1
0.8-150600.15.12.1
avahi-glib2
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 0.8-150600.15.12.1
0.8-150600.15.12.1
avahi-qt5
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 0.8-150600.15.12.1
0.8-150600.15.12.1
avahi
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 3 CVEs
 before 0.6.32-32.36.1
0.6.32-32.36.1
avahi
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 3 CVEs
 before 0.8-150400.7.26.1
0.8-150400.7.26.1
avahi
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 3 CVEs
 before 0.8-150400.7.26.1
0.8-150400.7.26.1
avahi
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 3 CVEs
 before 0.8-150400.7.26.1
0.8-150400.7.26.1
avahi
SUSE:Linux Enterprise Server 16.0
From an advisory covering 3 CVEs
 before 0.8-160000.4.1
0.8-160000.4.1
avahi-glib2
SUSE:Linux Enterprise Server 16.0
From an advisory covering 3 CVEs
 before 0.8-160000.4.1
0.8-160000.4.1
avahi
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 3 CVEs
 before 0.8-160000.4.1
0.8-160000.4.1
avahi-glib2
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 3 CVEs
 before 0.8-160000.4.1
0.8-160000.4.1
avahi
SUSE:Linux Micro 6.2
From an advisory covering 3 CVEs
 before 0.8-160000.4.1
0.8-160000.4.1
avahi
SUSE:Linux Micro 6.0
From an advisory covering 4 CVEs
 before 0.8-7.1
0.8-7.1
avahi
Ubuntu:Pro:14.04:LTS
 before 0.6.31-4ubuntu1.3+esm4, plus listed versions
0.6.31-2ubuntu40.6.31-2ubuntu50.6.31-3ubuntu10.6.31-4ubuntu10.6.31-4ubuntu1.1
Show 5 moreShow less
0.6.31-4ubuntu1.20.6.31-4ubuntu1.30.6.31-4ubuntu1.3+esm10.6.31-4ubuntu1.3+esm20.6.31-4ubuntu1.3+esm3
0.6.31-4ubuntu1.3+esm4
avahi
Ubuntu:Pro:16.04:LTS
 before 0.6.32~rc+dfsg-1ubuntu2.3+esm4, plus listed versions
0.6.31-4ubuntu40.6.32~rc+dfsg-1ubuntu20.6.32~rc+dfsg-1ubuntu2.10.6.32~rc+dfsg-1ubuntu2.20.6.32~rc+dfsg-1ubuntu2.30.6.32~rc+dfsg-1ubuntu2.3+esm10.6.32~rc+dfsg-1ubuntu2.3+esm20.6.32~rc+dfsg-1ubuntu2.3+esm3
0.6.32~rc+dfsg-1ubuntu2.3+esm4
avahi
Ubuntu:Pro:18.04:LTS
 before 0.7-3.1ubuntu1.3+esm3, plus listed versions
0.6.32-1ubuntu10.7-3ubuntu10.7-3ubuntu20.7-3.1ubuntu10.7-3.1ubuntu1.1
Show 4 moreShow less
0.7-3.1ubuntu1.20.7-3.1ubuntu1.30.7-3.1ubuntu1.3+esm10.7-3.1ubuntu1.3+esm2
0.7-3.1ubuntu1.3+esm3
avahi
Ubuntu:Pro:20.04:LTS
 before 0.7-4ubuntu7.3+esm1, plus listed versions
0.7-4ubuntu50.7-4ubuntu60.7-4ubuntu70.7-4ubuntu7.10.7-4ubuntu7.20.7-4ubuntu7.3
0.7-4ubuntu7.3+esm1
avahi
Ubuntu:22.04:LTS
 before 0.8-5ubuntu5.4, plus listed versions
0.8-5ubuntu40.8-5ubuntu50.8-5ubuntu5.10.8-5ubuntu5.20.8-5ubuntu5.3
0.8-5ubuntu5.4
avahi
Ubuntu:24.04:LTS
 before 0.8-13ubuntu6.1, plus listed versions
0.8-10ubuntu10.8-13ubuntu10.8-13ubuntu20.8-13ubuntu40.8-13ubuntu50.8-13ubuntu6
0.8-13ubuntu6.1
avahi
Ubuntu:25.10
 before 0.8-16ubuntu3.1, plus listed versions
0.8-16ubuntu20.8-16ubuntu3
0.8-16ubuntu3.1
avahi
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 0.8-41.1
0.8-41.1
avahi
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 0.8-160000.4.1
0.8-160000.4.1
avahi-glib2
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 0.8-160000.4.1
0.8-160000.4.1
avahi-qt6
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 0.8-160000.4.1
0.8-160000.4.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-68471 is a medium vulnerability (CVSS 6.5) in Avahi, published January 12, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 35th percentile. Fixed in avahi 0.8-r25.

References

Show 60 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open