{"id":"CVE-2026-24401","aliases":["ALPINE-CVE-2026-24401","AZL-75204","AZL-75207","BELL-CVE-2026-24401","CLSA-2026-1773137055","CLSA-2026-1778112033","DEBIAN-CVE-2026-24401","EUVD-2026-4603","GHSA-h4vp-5m8j-f6w3","MGASA-2026-0338","OESA-2026-1450","RHSA-2026:11316","ROOT-OS-DEBIAN-12-CVE-2026-24401","ROOT-OS-DEBIAN-13-CVE-2026-24401","SUSE-SU-2026:1191-1","SUSE-SU-2026:1441-1","SUSE-SU-2026:1442-1","SUSE-SU-2026:21117-1","SUSE-SU-2026:21127-1","SUSE-SU-2026:22258-1","SUSE-SU-2026:22338-1","SUSE-SU-2026:2311-1","UBUNTU-CVE-2026-24401","USN-8269-1","openSUSE-SU-2026:10701-1","openSUSE-SU-2026:21014-1"],"status":"published","title":"Avahi has Uncontrolled Recursion in lookup_handle_cname function","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., \"h.local\" as a CNAME for \"h.local\"). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524, which is part of version 0.9-rc3.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00373,"percentile":0.31459,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-674"],"published":"2026-01-24T01:25:02Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.24","package":"avahi","fixed_in":["0.8-r25"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"avahi","fixed_in":["0.8-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"avahi","fixed_in":["0.8-7"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"avahi","fixed_in":["0.8-r9"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"avahi","fixed_in":["0.8-r22"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"avahi","fixed_in":["0.8-r24"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-autoipd","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-howl","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-howl-devel","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-libdns_sd","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-libdns_sd-devel","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-devel","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-dnsconfd","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-glib","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-glib-devel","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-gobject","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-gobject-devel","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-libs","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-tools","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui-devel","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui-gtk3","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui-tools","fixed_in":["0.8-22.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-autoipd","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-howl","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-howl-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-libdns_sd","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-libdns_sd-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-dnsconfd","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-glib","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-glib-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-gobject","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-gobject-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-libs","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-tools","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-devel","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-gtk3","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-tools","fixed_in":["0.8-12.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"avahi","fixed_in":["0.8-18"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"avahi","fixed_in":["0.8-26.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"avahi","fixed_in":["0.8-26.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"avahi","fixed_in":["0.8-26.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"avahi","fixed_in":["0.8-26.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"avahi","fixed_in":["0.8-26.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"avahi","fixed_in":["0.8-16.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"avahi","fixed_in":["0.8-10+deb12u1.root.io.12","0.8-10+deb12u1.aikido.13"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-avahi","fixed_in":["0.8-10+deb12u1.root.io.12","0.8-10+deb12u1.aikido.13"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"avahi","fixed_in":["0.8-16.aikido.7","0.8-16.aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-avahi","fixed_in":["0.8-16.aikido.7","0.8-16.aikido.8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"avahi","fixed_in":["0.7-150100.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"avahi","fixed_in":["0.8-150600.15.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"avahi-glib2","fixed_in":["0.8-150600.15.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"avahi","fixed_in":["0.8-150600.15.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"avahi-glib2","fixed_in":["0.8-150600.15.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"avahi","fixed_in":["0.8-150600.15.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"avahi","fixed_in":["0.8-150600.15.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"avahi-glib2","fixed_in":["0.8-150600.15.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"avahi-qt5","fixed_in":["0.8-150600.15.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"avahi","fixed_in":["0.6.32-32.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"avahi","fixed_in":["0.8-slfo.1.1_5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"avahi","fixed_in":["0.8-8.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"avahi","fixed_in":["0.6.31-4ubuntu1.3+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"avahi","fixed_in":["0.6.32~rc+dfsg-1ubuntu2.3+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"avahi","fixed_in":["0.7-3.1ubuntu1.3+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"avahi","fixed_in":["0.7-4ubuntu7.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"avahi","fixed_in":["0.8-5ubuntu5.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"avahi","fixed_in":["0.8-13ubuntu6.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"avahi","fixed_in":["0.8-16ubuntu3.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"avahi","fixed_in":["0.8-18ubuntu1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"avahi","fixed_in":["0.8-44.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-r25"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-7"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8-r5"},{"fixed":"0.8-r9"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8-r20"},{"fixed":"0.8-r22"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8-r5"},{"fixed":"0.8-r24"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-autoipd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-howl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-howl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-libdns_sd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-libdns_sd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-dnsconfd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-gobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-gobject-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-autoipd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-howl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-howl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-libdns_sd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-libdns_sd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-dnsconfd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-gobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-gobject-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-10","0.8-10+deb12u1","0.8-11","0.8-12","0.8-13","0.8-14","0.8-15","0.8-16","0.8-17","0.8-18"]},{"source":"osv","ecosystem":"Debian:13","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-16","0.8-17","0.8-18"]},{"source":"osv","ecosystem":"Debian:14","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-18"}]}],"versions":["0.8-16","0.8-17"]},{"source":"osv","ecosystem":"Mageia:10","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-18.1.mga10"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:9","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-10.4.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-26.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-26.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-26.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-26.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-26.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-16.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-autoipd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-howl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-howl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-libdns_sd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-libdns_sd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-dnsconfd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-gobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-gobject-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-sharp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-sharp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-sharp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Root:Debian:12","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-10+deb12u1.root.io.12"},{"fixed":"0.8-10+deb12u1.aikido.13"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-10+deb12u1.root.io.12"},{"fixed":"0.8-10+deb12u1.aikido.13"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-16.aikido.7"},{"fixed":"0.8-16.aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-16.aikido.7"},{"fixed":"0.8-16.aikido.8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7-150100.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"avahi-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.32-32.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-slfo.1.1_5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.31.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.31.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.31.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-4ubuntu1.3+esm5"}]}],"versions":["0.6.31-2ubuntu4","0.6.31-2ubuntu5","0.6.31-3ubuntu1","0.6.31-4ubuntu1","0.6.31-4ubuntu1.1","0.6.31-4ubuntu1.2","0.6.31-4ubuntu1.3","0.6.31-4ubuntu1.3+esm1","0.6.31-4ubuntu1.3+esm2","0.6.31-4ubuntu1.3+esm3","0.6.31-4ubuntu1.3+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.32~rc+dfsg-1ubuntu2.3+esm5"}]}],"versions":["0.6.31-4ubuntu4","0.6.32~rc+dfsg-1ubuntu2","0.6.32~rc+dfsg-1ubuntu2.1","0.6.32~rc+dfsg-1ubuntu2.2","0.6.32~rc+dfsg-1ubuntu2.3","0.6.32~rc+dfsg-1ubuntu2.3+esm1","0.6.32~rc+dfsg-1ubuntu2.3+esm2","0.6.32~rc+dfsg-1ubuntu2.3+esm3","0.6.32~rc+dfsg-1ubuntu2.3+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7-3.1ubuntu1.3+esm4"}]}],"versions":["0.6.32-1ubuntu1","0.7-3ubuntu1","0.7-3ubuntu2","0.7-3.1ubuntu1","0.7-3.1ubuntu1.1","0.7-3.1ubuntu1.2","0.7-3.1ubuntu1.3","0.7-3.1ubuntu1.3+esm1","0.7-3.1ubuntu1.3+esm2","0.7-3.1ubuntu1.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7-4ubuntu7.3+esm2"}]}],"versions":["0.7-4ubuntu5","0.7-4ubuntu6","0.7-4ubuntu7","0.7-4ubuntu7.1","0.7-4ubuntu7.2","0.7-4ubuntu7.3","0.7-4ubuntu7.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-5ubuntu5.5"}]}],"versions":["0.8-5ubuntu4","0.8-5ubuntu5","0.8-5ubuntu5.1","0.8-5ubuntu5.2","0.8-5ubuntu5.3","0.8-5ubuntu5.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-13ubuntu6.2"}]}],"versions":["0.8-10ubuntu1","0.8-13ubuntu1","0.8-13ubuntu2","0.8-13ubuntu4","0.8-13ubuntu5","0.8-13ubuntu6","0.8-13ubuntu6.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-16ubuntu3.2"}]}],"versions":["0.8-16ubuntu2","0.8-16ubuntu3","0.8-16ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-4ubuntu1.3+esm5"}]}],"versions":["0.6.31-2ubuntu4","0.6.31-2ubuntu5","0.6.31-3ubuntu1","0.6.31-4ubuntu1","0.6.31-4ubuntu1.1","0.6.31-4ubuntu1.2","0.6.31-4ubuntu1.3","0.6.31-4ubuntu1.3+esm1","0.6.31-4ubuntu1.3+esm2","0.6.31-4ubuntu1.3+esm3","0.6.31-4ubuntu1.3+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.32~rc+dfsg-1ubuntu2.3+esm5"}]}],"versions":["0.6.31-4ubuntu4","0.6.32~rc+dfsg-1ubuntu2","0.6.32~rc+dfsg-1ubuntu2.1","0.6.32~rc+dfsg-1ubuntu2.2","0.6.32~rc+dfsg-1ubuntu2.3","0.6.32~rc+dfsg-1ubuntu2.3+esm1","0.6.32~rc+dfsg-1ubuntu2.3+esm2","0.6.32~rc+dfsg-1ubuntu2.3+esm3","0.6.32~rc+dfsg-1ubuntu2.3+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7-3.1ubuntu1.3+esm4"}]}],"versions":["0.6.32-1ubuntu1","0.7-3ubuntu1","0.7-3ubuntu2","0.7-3.1ubuntu1","0.7-3.1ubuntu1.1","0.7-3.1ubuntu1.2","0.7-3.1ubuntu1.3","0.7-3.1ubuntu1.3+esm1","0.7-3.1ubuntu1.3+esm2","0.7-3.1ubuntu1.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7-4ubuntu7.3+esm2"}]}],"versions":["0.7-4ubuntu5","0.7-4ubuntu6","0.7-4ubuntu7","0.7-4ubuntu7.1","0.7-4ubuntu7.2","0.7-4ubuntu7.3","0.7-4ubuntu7.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-5ubuntu5.5"}]}],"versions":["0.8-5ubuntu4","0.8-5ubuntu5","0.8-5ubuntu5.1","0.8-5ubuntu5.2","0.8-5ubuntu5.3","0.8-5ubuntu5.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-13ubuntu6.2"}]}],"versions":["0.8-10ubuntu1","0.8-13ubuntu1","0.8-13ubuntu2","0.8-13ubuntu4","0.8-13ubuntu5","0.8-13ubuntu6","0.8-13ubuntu6.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-16ubuntu3.2"}]}],"versions":["0.8-16ubuntu2","0.8-16ubuntu3","0.8-16ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-18ubuntu1.1"}]}],"versions":["0.8-16ubuntu3","0.8-17ubuntu1","0.8-17ubuntu2","0.8-18ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-44.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"avahi-qt6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.5.1"}]}],"bundled":2}],"products":[{"vendor":"avahi","product":"avahi"}],"references":[{"url":"https://github.com/avahi/avahi/security/advisories/GHSA-h4vp-5m8j-f6w3","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","article","report"]},{"url":"https://github.com/avahi/avahi/issues/501","tags":["x_refsource_MISC","Issue Tracking","Patch","report","article"]},{"url":"https://github.com/avahi/avahi/commit/78eab31128479f06e30beb8c1cbf99dd921e2524","tags":["x_refsource_MISC","Patch","fix","article"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-24401","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24401","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-24401","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1773137055.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778112033.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24401.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-24401","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0338.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35044","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/12/19/1","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/04/11/9","tags":["web"]},{"url":"https://github.com/avahi/avahi/security/advisories/GHSA-w65r-6gxh-vhvc","tags":["advisory","article"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LK4OWC4GTD6XELDD5SALQ5NAKJF2JEJ3/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QRADPW6Z7LALOMFKDKQVKGWAXCKCS226/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1450","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:11316","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-68276","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-68468","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-68471","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-24401","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34933","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11316.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2428713","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68276","tags":["advisory"]},{"url":"https://github.com/avahi/avahi/commit/ede7048475c5d47d53890e3bc1350dda8e0b3688","tags":["article"]},{"url":"https://github.com/avahi/avahi/pull/806","tags":["article"]},{"url":"https://github.com/avahi/avahi/security/advisories/GHSA-mhf3-865v-g5rc","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2428714","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68468","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68468","tags":["advisory"]},{"url":"https://github.com/avahi/avahi/commit/f66be13d7f31a3ef806d226bf8b67240179d309a","tags":["article"]},{"url":"https://github.com/avahi/avahi/issues/683","tags":["article"]},{"url":"https://github.com/avahi/avahi/security/advisories/GHSA-cp79-r4x9-vf52","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2428717","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68471","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68471","tags":["advisory"]},{"url":"https://github.com/avahi/avahi/commit/9c6eb53bf2e290aed84b1f207e3ce35c54cc0aa1","tags":["article"]},{"url":"https://github.com/avahi/avahi/issues/678","tags":["article"]},{"url":"https://github.com/avahi/avahi/security/advisories/GHSA-56rf-42xr-qmmg","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2432534","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-24401","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2454978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34933","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34933","tags":["advisory"]},{"url":"https://github.com/avahi/avahi/commit/625ca0fac19229f6dfa3a6c6b698ae657187e50c","tags":["article"]},{"url":"https://github.com/avahi/avahi/pull/891","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261191-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257235","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24401","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261441-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261442-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621117-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621127-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622258-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1261546","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34933","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622338-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262311-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-24401","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8269-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-34933","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-24401","title":"Avahi has Uncontrolled Recursion in lookup_handle_cname function","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., \"h.local\" as a CNAME for \"h.local\"). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524, which is part of version 0.9-rc3.","status":"published","published":"2026-01-24T01:25:02.294Z","modified":"2026-10-23T15:54:16.116Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:19:50.575061Z"}],"euvd":[{"id":"EUVD-2026-4603","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., \"h.local\" as a CNAME for \"h.local\"). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524, which is part of version 0.9-rc3.","status":"published","published":"2026-01-24T01:25:02Z","modified":"2026-10-23T15:54:16Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:59:32.223152Z"}],"nvd":[{"id":"CVE-2026-24401","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., \"h.local\" as a CNAME for \"h.local\"). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524, which is part of version 0.9-rc3.","status":"published","published":"2026-01-24T02:15:48.76Z","modified":"2026-10-23T16:16:51.507Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:12:04.423757Z"}],"osv":[{"id":"ALPINE-CVE-2026-24401","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., \"h.local\" as a CNAME for \"h.local\"). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524, which is part of version 0.9-rc3.","status":"published","published":"2026-01-24T02:15:48.76Z","modified":"2026-10-24T09:30:02.731558147Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2026-24401","status":"published","published":"2026-01-29T06:07:46.191551Z","modified":"2026-02-11T07:41:11.949533Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:23.315185Z"},{"id":"CVE-2026-24401","title":"Avahi has Uncontrolled Recursion in lookup_handle_cname function","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., \"h.local\" as a CNAME for \"h.local\"). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524, which is part of version 0.9-rc3.","status":"published","published":"2026-01-24T01:25:02.294Z","modified":"2026-10-28T10:49:11.642522238Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T15:44:59.079784Z"},{"id":"DEBIAN-CVE-2026-24401","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., \"h.local\" as a CNAME for \"h.local\"). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524, which is part of version 0.9-rc3.","status":"published","published":"2026-01-24T02:15:48.76Z","modified":"2026-10-24T09:47:28.245384853Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:53.877573Z"},{"id":"OESA-2026-1450","title":"avahi security update","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared.\r\n\r\nSecurity Fix(es):\n\nAvahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., \u0026quot;h.local\u0026quot; as a CNAME for \u0026quot;h.local\u0026quot;). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524.(CVE-2026-24401)","status":"published","published":"2026-02-28T11:10:28Z","modified":"2026-08-18T01:19:34.995400153Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"RHSA-2026:11316","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-04-28T10:08:10Z","modified":"2026-10-06T10:31:13.167428395Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-24401","title":"CVE-2026-24401 in avahi - Patched by Root","description":"Root has patched CVE-2026-24401 in the avahi package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T08:31:45Z","modified":"2026-08-26T01:10:12.789154348Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:31.773105Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-24401","title":"CVE-2026-24401 in avahi - Patched by Root","description":"Root has patched CVE-2026-24401 in the avahi package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-08-23T14:15:48Z","modified":"2026-08-23T17:00:06.009577475Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:33.415244Z"},{"id":"UBUNTU-CVE-2026-24401","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., \"h.local\" as a CNAME for \"h.local\"). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524, which is part of version 0.9-rc3.","status":"published","published":"2026-01-24T02:15:00Z","modified":"2026-10-28T20:16:01.810005061Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:56:08.726452Z"},{"id":"AZL-75204","title":"CVE-2026-24401 affecting package avahi for versions less than 0.8-5","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., \"h.local\" as a CNAME for \"h.local\"). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524.","status":"published","published":"2026-01-24T02:15:48Z","modified":"2026-04-21T04:38:52.447667Z","updated_at":"2026-11-02T15:28:09.474476Z"},{"id":"AZL-75207","title":"CVE-2026-24401 affecting package avahi for versions less than 0.8-7","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., \"h.local\" as a CNAME for \"h.local\"). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524, which is part of version 0.9-rc3.","status":"published","published":"2026-01-24T02:15:48Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.456773Z"},{"id":"CLSA-2026-1773137055","title":"avahi: Fix of CVE-2026-24401","description":"- CVE-2026-24401: fix uncontrolled recursion in lookup_handle_cname caused by recursive CNAMEs","status":"published","published":"2026-03-10T10:04:19Z","modified":"2026-06-01T00:32:42.960283032Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1778112033","title":"avahi: Fix of CVE-2026-24401","description":"- CVE-2026-24401: fix avahi-daemon crash on receipt of unsolicited mDNS\n  responses containing self-referencing CNAME records by detecting CNAME\n  loops in lookup_handle_cname() to prevent uncontrolled recursion and stack\n  exhaustion; also includes two related DoS fixes in the same lookup path\n  from upstream PR #682","status":"published","published":"2026-05-07T00:00:38Z","modified":"2026-06-01T00:32:29.462095487Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"MGASA-2026-0338","title":"Updated avahi packages fix security vulnerabilities","description":"Simple protocol server ignores accepts unlimited connections and logs\nfailures without limit. (CVE-2025-59529)\nAvahi has Uncontrolled Recursion in lookup_handle_cname function.\n(CVE-2026-24401)\nReachable assertion in `transport_flags_from_domain()` via conflicting\npublish flags crashes avahi-daemon. (CVE-2026-34933)\n","status":"published","published":"2026-08-27T19:15:31Z","modified":"2026-08-27T19:30:04.077177227Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:10701-1","title":"avahi-0.8-44.1 on GA media","description":"These are all security issues fixed in the avahi-0.8-44.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-06T00:00:00Z","modified":"2026-05-07T08:47:42.407848Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:21014-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546).\n- CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the `avahi-daemon`\n  (bsc#1257235).\n","status":"published","published":"2026-06-22T14:40:15Z","modified":"2026-06-30T18:24:35.772909253Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:1191-1","title":"Security update for avahi","description":"This update for avahi fixes the following issue:\n\n- CVE-2026-24401: avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response\n  containing a recursive CNAME record (bsc#1257235).\n","status":"published","published":"2026-04-06T10:53:58Z","modified":"2026-04-08T07:50:02.373286Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1441-1","title":"Security update for avahi","description":"This update for avahi fixes the following issue:\n\n- CVE-2026-24401: avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response\n  containing a recursive CNAME record (bsc#1257235).\n","status":"published","published":"2026-04-17T14:18:21Z","modified":"2026-04-18T08:00:30.918613Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1442-1","title":"Security update for avahi","description":"This update for avahi fixes the following issue:\n\n- CVE-2026-24401: avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response\n  containing a recursive CNAME record (bsc#1257235).\n","status":"published","published":"2026-04-17T14:19:07Z","modified":"2026-04-18T08:00:43.372833Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:21117-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2026-24401: Fix unsolicited mDNS response containing a recursive CNAME record. (bsc#1257235)\n","status":"published","published":"2026-04-14T08:31:12Z","modified":"2026-04-18T18:25:54.47671Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:21127-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2026-24401: Fix unsolicited mDNS response containing a recursive CNAME record. (bsc#1257235)\n","status":"published","published":"2026-04-14T08:01:54Z","modified":"2026-04-18T18:25:04.48849Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:22258-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546).\n- CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the `avahi-daemon`\n  (bsc#1257235).\n","status":"published","published":"2026-06-22T14:38:22Z","modified":"2026-06-30T18:24:31.608072085Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:22338-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546).\n- CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the `avahi-daemon`\n  (bsc#1257235).\n","status":"published","published":"2026-06-22T14:38:22Z","modified":"2026-07-02T18:24:12.343272718Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:2311-1","title":"Security update for avahi","description":"This update for avahi fixes the following issue:\n\n- CVE-2026-24401: uncontrolled recursion in `lookup_handle_cname` can crash the `avahi-daemon` (bsc#1257235).\n- CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546).    \n","status":"published","published":"2026-06-09T11:05:45Z","modified":"2026-06-10T08:30:05.287013432Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"USN-8269-1","title":"avahi vulnerabilities","description":"It is discovered that Avahi incorrectly handled crafted input. A\nremote attacker could possibly use this issue to crash the program,\nresulting in a denial of service. This issue only affected Ubuntu\n14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-24401)\n\nGuillaume Meunier discovered that Avahi incorrectly handled crafted\ninput. An attacker could possibly use this issue to crash the\nprogram, resulting in a denial of service. (CVE-2026-34933)","status":"published","published":"2026-05-12T15:21:20Z","modified":"2026-05-22T17:16:55.591510218Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}