CVE-2006-5461
Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they...
Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.
Exploit likelihood
What each source reports
NVD Score used
Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.
- Record
CVE-2006-5461- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.
- Record
CVE-2006-5461- Updated
- 2026-11-02
EUVDEUVD-2006-5446 No score
Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.
- Record
EUVD-2006-5446- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4w5j-fgfj-644h No score
Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they...
Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.
- Record
GHSA-4w5j-fgfj-644h- Updated
- 2026-11-02
OSV No score
Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.
- Record
CVE-2006-5461- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-5461 No score
Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.
- Record
DEBIAN-CVE-2006-5461- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10643-1 No score
avahi-0.8-7.2 on GA media
These are all security issues fixed in the avahi-0.8-7.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10643-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5461 is a low vulnerability (CVSS 2.1) in Avahi, published November 14, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in avahi 0.6.15-1.
References
secunia.com/advisories/22932
novell.com/linux/security/advisories/2006_26_sr.html
usn.ubuntu.com/380-1
vupen.com/english/advisories/2006/4474
Show 20 moreShow less
avahi.org/milestone/Avahi%200.6.15
securitytracker.com/id?1017257
tango.0pointer.de/pipermail/avahi-tickets/2006-November/000320.html
mandriva.com/security/advisories?name=MDKSA-2006:215
exchange.xforce.ibmcloud.com/vulnerabilities/30207
gentoo.org/security/en/glsa/glsa-200611-13.xml
securityfocus.com/bid/21016
nvd.nist.gov/vuln/detail/CVE-2006-5461
github.com/advisories/GHSA-4w5j-fgfj-644h
security-tracker.debian.org/tracker/CVE-2006-5461
suse.com/security/cve/CVE-2006-5461