{"id":"CVE-2025-59529","aliases":["AZL-72851","AZL-72853","BELL-CVE-2025-59529","CLSA-2026-1786360814","CLSA-2026-1786533280","DEBIAN-CVE-2025-59529","EUVD-2025-204402","GHSA-73wf-3xmj-x82q","MGASA-2026-0338","RHSA-2026:7411","ROOT-OS-DEBIAN-13-CVE-2025-59529","SUSE-SU-2026:22853-1","SUSE-SU-2026:22932-1","SUSE-SU-2026:23039-1","SUSE-SU-2026:23161-1","SUSE-SU-2026:3216-1","SUSE-SU-2026:3217-1","SUSE-SU-2026:3218-1","UBUNTU-CVE-2025-59529","openSUSE-SU-2026:11313-1","openSUSE-SU-2026:21417-1"],"status":"published","title":"Avahi: simple protocol server ignores accepts unlimited connections and logs failures without limit","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc5, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although `CLIENTS_MAX` is defined, `server_work()` unconditionally `accept()`s and `client_new()` always appends the new client and increments `n_clients`. There is no check against the limit. When client cannot be accepted as a result of maximal socket number of avahi-daemon, it logs unconditionally error per each connection. Unprivileged local users can exhaust daemon memory and file descriptors, causing a denial of service system-wide for mDNS/DNS-SD. Exhausting local file descriptors causes increased system load caused by logging errors of each of request. Overloading prevents glibc calls using nss-mdns plugins to resolve `*.local.` names and link-local addresses. As of time of publication, no known patched versions are available, but a candidate fix is available in pull request 808, and some workarounds are available. Simple clients are offered for nss-mdns package functionality. It is not possible to disable the unix socket `/run/avahi-daemon/socket`, but resolution requests received via DBus are not affected directly. Tools avahi-resolve, avahi-resolve-address and avahi-resolve-host-name are not affected, they use DBus interface. It is possible to change permissions of unix socket after avahi-daemon is started. But avahi-daemon does not provide any configuration for it. Additional access restrictions like SELinux can also prevent unwanted tools to access the socket and keep resolution working for trusted users.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00222,"percentile":0.12941,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2025-12-18T20:25:31Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-autoipd","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-howl","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-howl-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-libdns_sd","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-libdns_sd-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-dnsconfd","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-glib","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-glib-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-gobject","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-gobject-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-libs","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-tools","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-gtk3","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-tools","fixed_in":["0.8-12.el9_2.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-autoipd","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-howl","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-howl-devel","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-libdns_sd","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-libdns_sd-devel","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-devel","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-dnsconfd","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-glib","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-glib-devel","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-gobject","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-gobject-devel","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-libs","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt3","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt3-devel","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt4","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt4-devel","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt5","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt5-devel","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-sharp","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-tools","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-devel","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-gtk3","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-sharp","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-sharp-devel","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-tools","fixed_in":["0:0.9~rc2-8.1.hum1"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"avahi","fixed_in":["0.8-16.aikido.7","0.8-16.root.io.5","0.8-16.root.io.6","0.8-16.aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-avahi","fixed_in":["0.8-16.aikido.7","0.8-16.root.io.5","0.8-16.root.io.6","0.8-16.aikido.8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"avahi","fixed_in":["0.8-160000.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"avahi-glib2","fixed_in":["0.8-160000.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"avahi","fixed_in":["0.8-160000.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"avahi-glib2","fixed_in":["0.8-160000.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.2","package":"avahi","fixed_in":["0.8-160000.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"avahi","fixed_in":["0.8-10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"avahi","fixed_in":["0.8-slfo.1.1_8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"avahi","fixed_in":["0.6.32-32.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"avahi","fixed_in":["0.8-150400.7.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"avahi","fixed_in":["0.8-150400.7.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"avahi","fixed_in":["0.8-150400.7.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"avahi","fixed_in":["0.8-150600.15.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"avahi-glib2","fixed_in":["0.8-150600.15.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"avahi","fixed_in":["0.8-150600.15.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"avahi-glib2","fixed_in":["0.8-150600.15.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"avahi","fixed_in":["0.8-150600.15.21.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"avahi","fixed_in":["0.8-45.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"avahi","fixed_in":["0.8-160000.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"avahi-glib2","fixed_in":["0.8-160000.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"avahi-qt6","fixed_in":["0.8-160000.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.8-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.8-9"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8-r5"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8-r20"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8-r5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-autoipd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-howl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-howl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-libdns_sd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-libdns_sd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-dnsconfd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-gobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-gobject-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-autoipd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-howl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-howl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-libdns_sd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-libdns_sd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-dnsconfd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-gobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-gobject-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-10","0.8-10+deb12u1","0.8-11","0.8-12","0.8-13","0.8-14","0.8-15","0.8-16","0.8-17","0.8-18"]},{"source":"osv","ecosystem":"Debian:13","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-16","0.8-17","0.8-18"]},{"source":"osv","ecosystem":"Debian:14","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-16","0.8-17","0.8-18"]},{"source":"osv","ecosystem":"Mageia:10","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-18.1.mga10"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:9","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-10.4.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-autoipd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-howl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-howl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-libdns_sd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-libdns_sd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-dnsconfd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-gobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-gobject-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-sharp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-sharp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-sharp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc2-8.1.hum1"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-16.aikido.7"},{"fixed":"0.8-16.root.io.5"},{"fixed":"0.8-16.root.io.6"},{"fixed":"0.8-16.aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-16.aikido.7"},{"fixed":"0.8-16.root.io.5"},{"fixed":"0.8-16.root.io.6"},{"fixed":"0.8-16.aikido.8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-slfo.1.1_8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.32-32.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.21.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.31-2ubuntu4","0.6.31-2ubuntu5","0.6.31-3ubuntu1","0.6.31-4ubuntu1","0.6.31-4ubuntu1.1","0.6.31-4ubuntu1.2","0.6.31-4ubuntu1.3","0.6.31-4ubuntu1.3+esm1","0.6.31-4ubuntu1.3+esm2","0.6.31-4ubuntu1.3+esm3","0.6.31-4ubuntu1.3+esm4","0.6.31-4ubuntu1.3+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.31-4ubuntu4","0.6.32~rc+dfsg-1ubuntu2","0.6.32~rc+dfsg-1ubuntu2.1","0.6.32~rc+dfsg-1ubuntu2.2","0.6.32~rc+dfsg-1ubuntu2.3","0.6.32~rc+dfsg-1ubuntu2.3+esm1","0.6.32~rc+dfsg-1ubuntu2.3+esm2","0.6.32~rc+dfsg-1ubuntu2.3+esm3","0.6.32~rc+dfsg-1ubuntu2.3+esm4","0.6.32~rc+dfsg-1ubuntu2.3+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.32-1ubuntu1","0.7-3ubuntu1","0.7-3ubuntu2","0.7-3.1ubuntu1","0.7-3.1ubuntu1.1","0.7-3.1ubuntu1.2","0.7-3.1ubuntu1.3","0.7-3.1ubuntu1.3+esm1","0.7-3.1ubuntu1.3+esm2","0.7-3.1ubuntu1.3+esm3","0.7-3.1ubuntu1.3+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7-4ubuntu5","0.7-4ubuntu6","0.7-4ubuntu7","0.7-4ubuntu7.1","0.7-4ubuntu7.2","0.7-4ubuntu7.3","0.7-4ubuntu7.3+esm1","0.7-4ubuntu7.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-5ubuntu4","0.8-5ubuntu5","0.8-5ubuntu5.1","0.8-5ubuntu5.2","0.8-5ubuntu5.3","0.8-5ubuntu5.4","0.8-5ubuntu5.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-10ubuntu1","0.8-13ubuntu1","0.8-13ubuntu2","0.8-13ubuntu4","0.8-13ubuntu5","0.8-13ubuntu6","0.8-13ubuntu6.1","0.8-13ubuntu6.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-16ubuntu2","0.8-16ubuntu3","0.8-16ubuntu3.1","0.8-16ubuntu3.2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-18ubuntu1","0.8-18ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-16ubuntu3","0.8-17ubuntu1","0.8-17ubuntu2","0.8-18ubuntu1","0.8-18ubuntu1.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-45.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"avahi-qt6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.6.1"}]}]}],"products":[{"vendor":"avahi","product":"avahi"}],"references":[{"url":"https://github.com/avahi/avahi/security/advisories/GHSA-73wf-3xmj-x82q","tags":["x_refsource_CONFIRM","Exploit","Vendor Advisory","advisory","report"]},{"url":"https://github.com/avahi/avahi/pull/808","tags":["x_refsource_MISC","Issue Tracking","Patch","fix"]},{"url":"https://github.com/avahi/avahi/pull/975","tags":["x_refsource_MISC","fix"]},{"url":"https://zeropath.com/blog/avahi-simple-protocol-server-dos-cve-2025-59529","tags":["x_refsource_MISC","Exploit","Third Party Advisory","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2025/12/19/1","tags":["Exploit","Mailing List","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59529","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-59529","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1786360814.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68468","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68471","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1786533280.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34933","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59529.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-59529","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0338.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35044","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/12/19/1","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/04/11/9","tags":["web"]},{"url":"https://github.com/avahi/avahi/security/advisories/GHSA-w65r-6gxh-vhvc","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LK4OWC4GTD6XELDD5SALQ5NAKJF2JEJ3/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QRADPW6Z7LALOMFKDKQVKGWAXCKCS226/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7411","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-59529","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7411.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2405338","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-59529","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622853-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1255451","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59529","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622932-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623039-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623161-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263216-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263217-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263218-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-59529","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-59529","title":"Avahi: simple protocol server ignores accepts unlimited connections and logs failures without limit","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc5, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although `CLIENTS_MAX` is defined, `server_work()` unconditionally `accept()`s and `client_new()` always appends the new client and increments `n_clients`. There is no check against the limit. When client cannot be accepted as a result of maximal socket number of avahi-daemon, it logs unconditionally error per each connection. Unprivileged local users can exhaust daemon memory and file descriptors, causing a denial of service system-wide for mDNS/DNS-SD. Exhausting local file descriptors causes increased system load caused by logging errors of each of request. Overloading prevents glibc calls using nss-mdns plugins to resolve `*.local.` names and link-local addresses. As of time of publication, no known patched versions are available, but a candidate fix is available in pull request 808, and some workarounds are available. Simple clients are offered for nss-mdns package functionality. It is not possible to disable the unix socket `/run/avahi-daemon/socket`, but resolution requests received via DBus are not affected directly. Tools avahi-resolve, avahi-resolve-address and avahi-resolve-host-name are not affected, they use DBus interface. It is possible to change permissions of unix socket after avahi-daemon is started. But avahi-daemon does not provide any configuration for it. Additional access restrictions like SELinux can also prevent unwanted tools to access the socket and keep resolution working for trusted users.","status":"published","published":"2025-12-18T20:25:31.499Z","modified":"2026-10-23T19:33:17.866Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:32:47.812946Z"}],"euvd":[{"id":"EUVD-2025-204402","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc5, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although `CLIENTS_MAX` is defined, `server_work()` unconditionally `accept()`s and `client_new()` always appends the new client and increments `n_clients`. There is no check against the limit. When client cannot be accepted as a result of maximal socket number of avahi-daemon, it logs unconditionally error per each connection. Unprivileged local users can exhaust daemon memory and file descriptors, causing a denial of service system-wide for mDNS/DNS-SD. Exhausting local file descriptors causes increased system load caused by logging errors of each of request. Overloading prevents glibc calls using nss-mdns plugins to resolve `*.local.` names and link-local addresses. As of time of publication, no known patched versions are available, but a candidate fix is available in pull request 808, and some workarounds are available. Simple clients are offered for nss-mdns package functionality. It is not possible to disable the unix socket `/run/avahi-daemon/socket`, but resolution requests received via DBus are not affected directly. Tools avahi-resolve, avahi-resolve-address and avahi-resolve-host-name are not affected, they use DBus interface. It is possible to change permissions of unix socket after avahi-daemon is started. But avahi-daemon does not provide any configuration for it. Additional access restrictions like SELinux can also prevent unwanted tools to access the socket and keep resolution working for trusted users.","status":"published","published":"2025-12-18T20:25:31Z","modified":"2026-10-23T19:33:17Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:59:31.865878Z"}],"nvd":[{"id":"CVE-2025-59529","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc5, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although `CLIENTS_MAX` is defined, `server_work()` unconditionally `accept()`s and `client_new()` always appends the new client and increments `n_clients`. There is no check against the limit. When client cannot be accepted as a result of maximal socket number of avahi-daemon, it logs unconditionally error per each connection. Unprivileged local users can exhaust daemon memory and file descriptors, causing a denial of service system-wide for mDNS/DNS-SD. Exhausting local file descriptors causes increased system load caused by logging errors of each of request. Overloading prevents glibc calls using nss-mdns plugins to resolve `*.local.` names and link-local addresses. As of time of publication, no known patched versions are available, but a candidate fix is available in pull request 808, and some workarounds are available. Simple clients are offered for nss-mdns package functionality. It is not possible to disable the unix socket `/run/avahi-daemon/socket`, but resolution requests received via DBus are not affected directly. Tools avahi-resolve, avahi-resolve-address and avahi-resolve-host-name are not affected, they use DBus interface. It is possible to change permissions of unix socket after avahi-daemon is started. But avahi-daemon does not provide any configuration for it. Additional access restrictions like SELinux can also prevent unwanted tools to access the socket and keep resolution working for trusted users.","status":"published","published":"2025-12-18T21:15:53.637Z","modified":"2026-10-23T20:17:19.563Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:11:52.309391Z"}],"osv":[{"id":"BELL-CVE-2025-59529","status":"published","published":"2025-12-21T06:07:55.775881Z","modified":"2026-01-26T09:40:34.944805Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:22.495824Z"},{"id":"CVE-2025-59529","title":"Avahi: simple protocol server ignores accepts unlimited connections and logs failures without limit","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc5, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although `CLIENTS_MAX` is defined, `server_work()` unconditionally `accept()`s and `client_new()` always appends the new client and increments `n_clients`. There is no check against the limit. When client cannot be accepted as a result of maximal socket number of avahi-daemon, it logs unconditionally error per each connection. Unprivileged local users can exhaust daemon memory and file descriptors, causing a denial of service system-wide for mDNS/DNS-SD. Exhausting local file descriptors causes increased system load caused by logging errors of each of request. Overloading prevents glibc calls using nss-mdns plugins to resolve `*.local.` names and link-local addresses. As of time of publication, no known patched versions are available, but a candidate fix is available in pull request 808, and some workarounds are available. Simple clients are offered for nss-mdns package functionality. It is not possible to disable the unix socket `/run/avahi-daemon/socket`, but resolution requests received via DBus are not affected directly. Tools avahi-resolve, avahi-resolve-address and avahi-resolve-host-name are not affected, they use DBus interface. It is possible to change permissions of unix socket after avahi-daemon is started. But avahi-daemon does not provide any configuration for it. Additional access restrictions like SELinux can also prevent unwanted tools to access the socket and keep resolution working for trusted users.","status":"published","published":"2025-12-18T20:25:31.499Z","modified":"2026-10-28T02:31:06.038676795Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:44:51.516975Z"},{"id":"DEBIAN-CVE-2025-59529","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc5, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although `CLIENTS_MAX` is defined, `server_work()` unconditionally `accept()`s and `client_new()` always appends the new client and increments `n_clients`. There is no check against the limit. When client cannot be accepted as a result of maximal socket number of avahi-daemon, it logs unconditionally error per each connection. Unprivileged local users can exhaust daemon memory and file descriptors, causing a denial of service system-wide for mDNS/DNS-SD. Exhausting local file descriptors causes increased system load caused by logging errors of each of request. Overloading prevents glibc calls using nss-mdns plugins to resolve `*.local.` names and link-local addresses. As of time of publication, no known patched versions are available, but a candidate fix is available in pull request 808, and some workarounds are available. Simple clients are offered for nss-mdns package functionality. It is not possible to disable the unix socket `/run/avahi-daemon/socket`, but resolution requests received via DBus are not affected directly. Tools avahi-resolve, avahi-resolve-address and avahi-resolve-host-name are not affected, they use DBus interface. It is possible to change permissions of unix socket after avahi-daemon is started. But avahi-daemon does not provide any configuration for it. Additional access restrictions like SELinux can also prevent unwanted tools to access the socket and keep resolution working for trusted users.","status":"published","published":"2025-12-18T21:15:53.637Z","modified":"2026-10-24T09:47:23.938513887Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"RHSA-2026:7411","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-09-01T10:29:24Z","modified":"2026-10-06T10:31:34.76298554Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2025-59529","title":"CVE-2025-59529 in avahi - Patched by Root","description":"Root has patched CVE-2025-59529 in the avahi package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-08-23T14:15:48Z","modified":"2026-08-23T17:00:04.384550349Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:33.153539Z"},{"id":"UBUNTU-CVE-2025-59529","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc5, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although `CLIENTS_MAX` is defined, `server_work()` unconditionally `accept()`s and `client_new()` always appends the new client and increments `n_clients`. There is no check against the limit. When client cannot be accepted as a result of maximal socket number of avahi-daemon, it logs unconditionally error per each connection. Unprivileged local users can exhaust daemon memory and file descriptors, causing a denial of service system-wide for mDNS/DNS-SD. Exhausting local file descriptors causes increased system load caused by logging errors of each of request. Overloading prevents glibc calls using nss-mdns plugins to resolve `*.local.` names and link-local addresses. As of time of publication, no known patched versions are available, but a candidate fix is available in pull request 808, and some workarounds are available. Simple clients are offered for nss-mdns package functionality. It is not possible to disable the unix socket `/run/avahi-daemon/socket`, but resolution requests received via DBus are not affected directly. Tools avahi-resolve, avahi-resolve-address and avahi-resolve-host-name are not affected, they use DBus interface. It is possible to change permissions of unix socket after avahi-daemon is started. But avahi-daemon does not provide any configuration for it. Additional access restrictions like SELinux can also prevent unwanted tools to access the socket and keep resolution working for trusted users.","status":"published","published":"2025-12-18T21:15:00Z","modified":"2026-10-28T20:15:54.865706763Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:50.817402Z"},{"id":"AZL-72851","title":"CVE-2025-59529 affecting package avahi 0.8-5","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc2, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although `CLIENTS_MAX` is defined, `server_work()` unconditionally `accept()`s and `client_new()` always appends the new client and increments `n_clients`. There is no check against the limit. When client cannot be accepted as a result of maximal socket number of avahi-daemon, it logs unconditionally error per each connection. Unprivileged local users can exhaust daemon memory and file descriptors, causing a denial of service system-wide for mDNS/DNS-SD. Exhausting local file descriptors causes increased system load caused by logging errors of each of request. Overloading prevents glibc calls using nss-mdns plugins to resolve `*.local.` names and link-local addresses. As of time of publication, no known patched versions are available, but a candidate fix is available in pull request 808, and some workarounds are available. Simple clients are offered for nss-mdns package functionality. It is not possible to disable the unix socket `/run/avahi-daemon/socket`, but resolution requests received via DBus are not affected directly. Tools avahi-resolve, avahi-resolve-address and avahi-resolve-host-name are not affected, they use DBus interface. It is possible to change permissions of unix socket after avahi-daemon is started. But avahi-daemon does not provide any configuration for it. Additional access restrictions like SELinux can also prevent unwanted tools to access the socket and keep resolution working for trusted users.","status":"published","published":"2025-12-18T21:15:53Z","modified":"2026-04-21T04:33:43.863703Z","updated_at":"2026-11-02T15:28:09.201912Z"},{"id":"AZL-72853","title":"CVE-2025-59529 affecting package avahi 0.8-9","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc5, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although `CLIENTS_MAX` is defined, `server_work()` unconditionally `accept()`s and `client_new()` always appends the new client and increments `n_clients`. There is no check against the limit. When client cannot be accepted as a result of maximal socket number of avahi-daemon, it logs unconditionally error per each connection. Unprivileged local users can exhaust daemon memory and file descriptors, causing a denial of service system-wide for mDNS/DNS-SD. Exhausting local file descriptors causes increased system load caused by logging errors of each of request. Overloading prevents glibc calls using nss-mdns plugins to resolve `*.local.` names and link-local addresses. As of time of publication, no known patched versions are available, but a candidate fix is available in pull request 808, and some workarounds are available. Simple clients are offered for nss-mdns package functionality. It is not possible to disable the unix socket `/run/avahi-daemon/socket`, but resolution requests received via DBus are not affected directly. Tools avahi-resolve, avahi-resolve-address and avahi-resolve-host-name are not affected, they use DBus interface. It is possible to change permissions of unix socket after avahi-daemon is started. But avahi-daemon does not provide any configuration for it. Additional access restrictions like SELinux can also prevent unwanted tools to access the socket and keep resolution working for trusted users.","status":"published","published":"2025-12-18T21:15:53Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.309973Z"},{"id":"CLSA-2026-1786360814","title":"avahi: Fix of 3 CVEs","description":"- CVE-2025-59529: limit local simple-protocol clients to prevent memory and file descriptor exhaustion","status":"published","published":"2026-10-23T23:23:01Z","modified":"2026-10-26T09:30:35.196733585Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1786533280","title":"avahi: Fix of 3 CVEs","description":"- CVE-2026-34933: refuse publish flags with both AVAHI_PUBLISH_USE_WIDE_AREA and AVAHI_PUBLISH_USE_MULTICAST set\n- CVE-2025-59529: limit local simple-protocol clients to prevent memory and file descriptor exhaustion\n- CVE-2025-68276: refuse to create wide-area record browsers when wide-area is off","status":"published","published":"2026-08-13T05:52:23Z","modified":"2026-10-26T09:43:17.441634841Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"MGASA-2026-0338","title":"Updated avahi packages fix security vulnerabilities","description":"Simple protocol server ignores accepts unlimited connections and logs\nfailures without limit. (CVE-2025-59529)\nAvahi has Uncontrolled Recursion in lookup_handle_cname function.\n(CVE-2026-24401)\nReachable assertion in `transport_flags_from_domain()` via conflicting\npublish flags crashes avahi-daemon. (CVE-2026-34933)\n","status":"published","published":"2026-08-27T19:15:31Z","modified":"2026-08-27T19:30:04.077177227Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11313-1","title":"avahi-0.8-45.1 on GA media","description":"These are all security issues fixed in the avahi-0.8-45.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-20T00:00:00Z","modified":"2026-07-21T09:45:08.134692989Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21417-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).\n\nChanges for avahi:\n\n- Make /var/lib/avahi-autoipd a ghost dir instead of packaging it\n since avahi-autoipd creates it on start (jsc#PED-14836).\n- Use libalternative instead of update-alternatives in TW and SLFO\n (jsc#PED-14835).\n","status":"published","published":"2026-07-22T12:41:51Z","modified":"2026-07-24T18:24:26.814922064Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22853-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).\n\nChanges for avahi:\n\n- Make /var/lib/avahi-autoipd a ghost dir instead of packaging it\n since avahi-autoipd creates it on start (jsc#PED-14836).\n- Use libalternative instead of update-alternatives in TW and SLFO\n (jsc#PED-14835).\n","status":"published","published":"2026-07-22T12:43:58Z","modified":"2026-07-28T18:24:10.546495054Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:22932-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).\n\nChanges for avahi:\n\n- Make /var/lib/avahi-autoipd a ghost dir instead of packaging it\n since avahi-autoipd creates it on start (jsc#PED-14836).\n- Use libalternative instead of update-alternatives in TW and SLFO\n (jsc#PED-14835).\n","status":"published","published":"2026-07-22T12:43:58Z","modified":"2026-07-29T18:24:20.927432612Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23039-1","title":"Security update for avahi","description":"This update for avahi fixes the following issue:\n\n- CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).\n","status":"published","published":"2026-07-29T09:58:45Z","modified":"2026-08-12T18:23:38.757014643Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23161-1","title":"Security update for avahi","description":"This update for avahi fixes the following issue\n\n- CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).\n","status":"published","published":"2026-08-04T11:08:29Z","modified":"2026-08-22T18:23:33.204253626Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:3216-1","title":"Security update for avahi","description":"This update for avahi fixes the following issue:\n\n- CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).\n","status":"published","published":"2026-07-23T17:33:10Z","modified":"2026-07-24T17:16:05.036788499Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3217-1","title":"Security update for avahi","description":"This update for avahi fixes the following issue:\n\n- CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).\n","status":"published","published":"2026-07-23T17:33:51Z","modified":"2026-07-24T17:16:04.986770133Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3218-1","title":"Security update for avahi","description":"This update for avahi fixes the following issue:\n\n- CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).\n","status":"published","published":"2026-07-23T17:34:29Z","modified":"2026-07-24T17:16:05.060165904Z","updated_at":"2026-11-02T15:54:04.987808Z"}]}}