Every CVE Search/ Get API key

CVE-2026-34933

Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon

5.5 MediumFix available

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.21%Up 0.2 points since Apr 4, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.5

Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.

Record
CVE-2026-34933
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-617
Updated
2026-11-02
EUVDEUVD-2026-18910 5.5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.

Record
EUVD-2026-18910
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
NVD 5.5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.

Record
CVE-2026-34933
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-617
Updated
2026-11-02
OSVALPINE-CVE-2026-34933 5.5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.

Record
ALPINE-CVE-2026-34933
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2026-34933 5.5
Record
BELL-CVE-2026-34933
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.5

Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.

Record
CVE-2026-34933
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-617
Updated
2026-11-02
Show 25 moreShow less
OSVDEBIAN-CVE-2026-34933 5.5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.

Record
DEBIAN-CVE-2026-34933
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1854 5.5

avahi security update

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared.

Security Fix(es):

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.(CVE-2026-34933)

Record
OESA-2026-1854
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1982 5.5

avahi security update

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared.

Security Fix(es):

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.(CVE-2026-34933)

Record
OESA-2026-1982
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1983 5.5

avahi security update

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared.

Security Fix(es):

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.(CVE-2026-34933)

Record
OESA-2026-1983
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1984 5.5

avahi security update

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared.

Security Fix(es):

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.(CVE-2026-34933)

Record
OESA-2026-1984
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1985 5.5

avahi security update

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared.

Security Fix(es):

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.(CVE-2026-34933)

Record
OESA-2026-1985
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1986 5.5

avahi security update

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared.

Security Fix(es):

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.(CVE-2026-34933)

Record
OESA-2026-1986
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:11316 6.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:11316
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-34933 5.5

CVE-2026-34933 in avahi - Patched by Root

Root has patched CVE-2026-34933 in the avahi package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-34933
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-34933 5.5

CVE-2026-34933 in avahi - Patched by Root

Root has patched CVE-2026-34933 in the avahi package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-34933
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-34933 5.5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.

Record
UBUNTU-CVE-2026-34933
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-81959 No score

CVE-2026-34933 affecting package avahi for versions less than 0.8-8

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.

Record
AZL-81959
Updated
2026-11-05
OSVCLSA-2026-1785765391 No score

avahi: Fix of 2 CVEs

  • CVE-2025-68276: refuse to create wide-area record browsers when wide-area lookups are disabled; an unprivileged local user could crash avahi-daemon over D-Bus by passing AVAHI_LOOKUP_USE_WIDE_AREA to RecordBrowserNew, reaching an assertion in avahi_wide_area_scan_cache
  • CVE-2026-34933: reject publish flags that set both AVAHI_PUBLISH_USE_WIDE_AREA and AVAHI_PUBLISH_USE_MULTICAST; the conflicting pair tripped an assertion in transport_flags_from_domain and crashed avahi-daemon from any unprivileged local D-Bus caller
Record
CLSA-2026-1785765391
Updated
2026-11-02
OSVCLSA-2026-1786027278 No score

avahi: Fix of 4 CVEs

  • CVE-2025-68468: fix remote denial of service via crafted mDNS CNAME announcements (assertion failure in lookup_multicast_callback)
  • CVE-2025-68471: fix remote denial of service via unsolicited CNAME announcements (assertion failure in lookup_start)
  • CVE-2025-68276: fix local denial of service via D-Bus record browsers using AVAHI_LOOKUP_USE_WIDE_AREA when wide-area is disabled
  • CVE-2026-34933: fix local denial of service via D-Bus publish flags setting both AVAHI_PUBLISH_USE_WIDE_AREA and AVAHI_PUBLISH_USE_MULTICAST
Record
CLSA-2026-1786027278
Updated
2026-11-02
OSVCLSA-2026-1786533280 No score

avahi: Fix of 3 CVEs

  • CVE-2026-34933: refuse publish flags with both AVAHI_PUBLISH_USE_WIDE_AREA and AVAHI_PUBLISH_USE_MULTICAST set
  • CVE-2025-59529: limit local simple-protocol clients to prevent memory and file descriptor exhaustion
  • CVE-2025-68276: refuse to create wide-area record browsers when wide-area is off
Record
CLSA-2026-1786533280
Updated
2026-11-02
OSVMGASA-2026-0338 No score

Updated avahi packages fix security vulnerabilities

Simple protocol server ignores accepts unlimited connections and logs failures without limit. (CVE-2025-59529) Avahi has Uncontrolled Recursion in lookup_handle_cname function. (CVE-2026-24401) Reachable assertion in transport_flags_from_domain() via conflicting publish flags crashes avahi-daemon. (CVE-2026-34933)

Record
MGASA-2026-0338
Updated
2026-11-02
OSVopenSUSE-SU-2026:10670-1 No score

avahi-0.8-43.1 on GA media

These are all security issues fixed in the avahi-0.8-43.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10670-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21014-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2026-34933: reachable assertion in transport_flags_from_domain can crash the avahi-daemon (bsc#1261546).
  • CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the avahi-daemon (bsc#1257235).
Record
openSUSE-SU-2026:21014-1
Updated
2026-11-02
OSVSUSE-SU-2026:21417-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2026-34933: reachable assertion in transport_flags_from_domain can crash the avahi-daemon (bsc#1261546).
Record
SUSE-SU-2026:21417-1
Updated
2026-11-02
OSVSUSE-SU-2026:21631-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2026-34933: reachable assertion in transport_flags_from_domain can crash the avahi-daemon (bsc#1261546).
Record
SUSE-SU-2026:21631-1
Updated
2026-11-02
OSVSUSE-SU-2026:22258-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2026-34933: reachable assertion in transport_flags_from_domain can crash the avahi-daemon (bsc#1261546).
  • CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the avahi-daemon (bsc#1257235).
Record
SUSE-SU-2026:22258-1
Updated
2026-11-02
OSVSUSE-SU-2026:22338-1 No score

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2026-34933: reachable assertion in transport_flags_from_domain can crash the avahi-daemon (bsc#1261546).
  • CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the avahi-daemon (bsc#1257235).
Record
SUSE-SU-2026:22338-1
Updated
2026-11-02
OSVSUSE-SU-2026:2296-1 No score

Security update for avahi

This update for avahi fixes the following issue:

  • CVE-2026-34933: reachable assertion in transport_flags_from_domain can crash the avahi-daemon (bsc#1261546).
Record
SUSE-SU-2026:2296-1
Updated
2026-11-02
OSVSUSE-SU-2026:2297-1 No score

Security update for avahi

This update for avahi fixes the following issue:

  • CVE-2026-34933: Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags (bsc#1261546).
Record
SUSE-SU-2026:2297-1
Updated
2026-11-02
OSVSUSE-SU-2026:2311-1 No score

Security update for avahi

This update for avahi fixes the following issue:

  • CVE-2026-24401: uncontrolled recursion in lookup_handle_cname can crash the avahi-daemon (bsc#1257235).
  • CVE-2026-34933: reachable assertion in transport_flags_from_domain can crash the avahi-daemon (bsc#1261546).
Record
SUSE-SU-2026:2311-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
avahi
Alpine:v3.24
 before 0.8-r26
0.8-r26
avahi
Azure Linux:3
 before 0.8-8
0.8-8
avahi
Alpaquita:stream
 0.8-r5 up to 0.8-r26
0.8-r26
avahi
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-autoipd
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-compat-howl
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-compat-howl-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-compat-libdns_sd
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-compat-libdns_sd-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
Show 113 moreShow less
Affected packages
PackageAffectedFixed
avahi-dnsconfd
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-glib
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-glib-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-gobject
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-gobject-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-ui
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-ui-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-ui-gtk3
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi-ui-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.8-12.el9_2.1.tuxcare.els5
0.8-12.el9_2.1.tuxcare.els5
avahi
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-autoipd
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-compat-howl
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-compat-howl-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-compat-libdns_sd
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-compat-libdns_sd-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-dnsconfd
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-glib
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-glib-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-gobject
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-gobject-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-libs
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-qt3
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-qt3-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-qt4
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-qt4-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-tools
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-ui
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-ui-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-ui-gtk3
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi-ui-tools
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 0.6.31-20.el7.tuxcare.els1
0.6.31-20.el7.tuxcare.els1
avahi
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-autoipd
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-compat-howl
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-compat-howl-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-compat-libdns_sd
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-compat-libdns_sd-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-dnsconfd
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-glib
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-glib-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-gobject
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-gobject-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-libs
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-tools
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-ui
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-ui-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-ui-gtk3
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi-ui-tools
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.8-22.el9_6.1.tuxcare.els2
0.8-22.el9_6.1.tuxcare.els2
avahi
Debian:12
 All versions, plus listed versions
0.8-100.8-10+deb12u10.8-110.8-120.8-13
Show 5 moreShow less
0.8-140.8-150.8-160.8-170.8-18
 None known
avahi
Debian:13
 All versions, plus listed versions
0.8-160.8-170.8-18
 None known
avahi
Debian:14
 All versions, plus listed versions
0.8-160.8-170.8-18
 None known
avahi
Mageia:10
From an advisory covering 3 CVEs
 before 0.8-18.1.mga10
0.8-18.1.mga10
avahi
Mageia:9
From an advisory covering 3 CVEs
 before 0.8-10.4.mga9
0.8-10.4.mga9
avahi
openEuler:24.03-LTS-SP3
 before 0.8-28.oe2403sp3
0.8-28.oe2403sp3
avahi
openEuler:24.03-LTS-SP2
 before 0.8-28.oe2403sp2
0.8-28.oe2403sp2
avahi
openEuler:20.03-LTS-SP4
 before 0.8-18.oe2003sp4
0.8-18.oe2003sp4
avahi
openEuler:22.03-LTS-SP4
 before 0.8-28.oe2203sp4
0.8-28.oe2203sp4
avahi
openEuler:24.03-LTS
 before 0.8-28.oe2403
0.8-28.oe2403
avahi
openEuler:24.03-LTS-SP1
 before 0.8-28.oe2403sp1
0.8-28.oe2403sp1
avahi
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-autoipd
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-compat-howl
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-compat-howl-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-compat-libdns_sd
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-compat-libdns_sd-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-dnsconfd
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-glib
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-glib-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-gobject
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-gobject-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-libs
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-qt3
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-qt3-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-qt4
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-qt4-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-qt5
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-qt5-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-sharp
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-tools
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-ui
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-ui-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-ui-gtk3
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-ui-sharp
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-ui-sharp-devel
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi-ui-tools
Red Hat:hummingbird:1
From an advisory covering 5 CVEs
 before 0:0.9~rc4-0.1.hum1
0:0.9~rc4-0.1.hum1
avahi
Root:Debian:12
 before 0.8-10+deb12u1.root.io.12
0.8-10+deb12u1.root.io.120.8-10+deb12u1.aikido.13
rootio-avahi
Root:Debian:12
 before 0.8-10+deb12u1.root.io.12
0.8-10+deb12u1.root.io.120.8-10+deb12u1.aikido.13
avahi
Root:Debian:13
 before 0.8-16.aikido.7
0.8-16.aikido.70.8-16.aikido.8
rootio-avahi
Root:Debian:13
 before 0.8-16.aikido.7
0.8-16.aikido.70.8-16.aikido.8
avahi
SUSE:Linux Micro 6.2
From an advisory covering 2 CVEs
 before 0.8-160000.5.1
0.8-160000.5.1
avahi
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 0.8-160000.5.1
0.8-160000.5.1
avahi-glib2
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 0.8-160000.5.1
0.8-160000.5.1
avahi
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 0.8-160000.5.1
0.8-160000.5.1
avahi-glib2
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 0.8-160000.5.1
0.8-160000.5.1
avahi
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 0.8-150400.7.31.2
0.8-150400.7.31.2
avahi
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 2 CVEs
 before 0.8-150400.7.31.2
0.8-150400.7.31.2
avahi
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
 before 0.8-150400.7.31.2
0.8-150400.7.31.2
avahi
Ubuntu:Pro:14.04:LTS
 before 0.6.31-4ubuntu1.3+esm5, plus listed versions
0.6.31-2ubuntu40.6.31-2ubuntu50.6.31-3ubuntu10.6.31-4ubuntu10.6.31-4ubuntu1.1
Show 6 moreShow less
0.6.31-4ubuntu1.20.6.31-4ubuntu1.30.6.31-4ubuntu1.3+esm10.6.31-4ubuntu1.3+esm20.6.31-4ubuntu1.3+esm30.6.31-4ubuntu1.3+esm4
0.6.31-4ubuntu1.3+esm5
avahi
Ubuntu:Pro:16.04:LTS
 before 0.6.32~rc+dfsg-1ubuntu2.3+esm5, plus listed versions
0.6.31-4ubuntu40.6.32~rc+dfsg-1ubuntu20.6.32~rc+dfsg-1ubuntu2.10.6.32~rc+dfsg-1ubuntu2.20.6.32~rc+dfsg-1ubuntu2.3
Show 4 moreShow less
0.6.32~rc+dfsg-1ubuntu2.3+esm10.6.32~rc+dfsg-1ubuntu2.3+esm20.6.32~rc+dfsg-1ubuntu2.3+esm30.6.32~rc+dfsg-1ubuntu2.3+esm4
0.6.32~rc+dfsg-1ubuntu2.3+esm5
avahi
Ubuntu:Pro:18.04:LTS
 before 0.7-3.1ubuntu1.3+esm4, plus listed versions
0.6.32-1ubuntu10.7-3ubuntu10.7-3ubuntu20.7-3.1ubuntu10.7-3.1ubuntu1.1
Show 5 moreShow less
0.7-3.1ubuntu1.20.7-3.1ubuntu1.30.7-3.1ubuntu1.3+esm10.7-3.1ubuntu1.3+esm20.7-3.1ubuntu1.3+esm3
0.7-3.1ubuntu1.3+esm4
avahi
Ubuntu:Pro:20.04:LTS
 before 0.7-4ubuntu7.3+esm2, plus listed versions
0.7-4ubuntu50.7-4ubuntu60.7-4ubuntu70.7-4ubuntu7.10.7-4ubuntu7.20.7-4ubuntu7.30.7-4ubuntu7.3+esm1
0.7-4ubuntu7.3+esm2
avahi
Ubuntu:22.04:LTS
 before 0.8-5ubuntu5.5, plus listed versions
0.8-5ubuntu40.8-5ubuntu50.8-5ubuntu5.10.8-5ubuntu5.20.8-5ubuntu5.30.8-5ubuntu5.4
0.8-5ubuntu5.5
avahi
Ubuntu:24.04:LTS
 before 0.8-13ubuntu6.2, plus listed versions
0.8-10ubuntu10.8-13ubuntu10.8-13ubuntu20.8-13ubuntu40.8-13ubuntu50.8-13ubuntu60.8-13ubuntu6.1
0.8-13ubuntu6.2
avahi
Ubuntu:25.10
 before 0.8-16ubuntu3.2, plus listed versions
0.8-16ubuntu20.8-16ubuntu30.8-16ubuntu3.1
0.8-16ubuntu3.2
avahi
Ubuntu:26.04:LTS
 before 0.8-18ubuntu1.1, plus listed versions
0.8-16ubuntu30.8-17ubuntu10.8-17ubuntu20.8-18ubuntu1
0.8-18ubuntu1.1
avahi
openSUSE:Tumbleweed
 before 0.8-43.1
0.8-43.1
avahi
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 0.8-160000.5.1
0.8-160000.5.1
avahi-glib2
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 0.8-160000.5.1
0.8-160000.5.1
avahi-qt6
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 0.8-160000.5.1
0.8-160000.5.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-34933 is a medium vulnerability (CVSS 5.5) in Avahi, published April 3, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 10th percentile. Fixed in avahi 0.8-r26.

References

Show 66 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open