Avahi vulnerabilities

Products

• Avahi 25

Newest

• avahi Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon CVE-2026-34933 Fix available 5.5 MediumApril 3, 2026
• avahi Avahi has Uncontrolled Recursion in lookup_handle_cname function CVE-2026-24401 Fix available 6.5 MediumJanuary 24, 2026
• avahi Avahi has a reachable assertion in lookup_start CVE-2025-68471 Fix available 6.5 MediumJanuary 12, 2026
• avahi Avahi has a reachable assertion in lookup_multicast_callback CVE-2025-68468 Fix available 6.5 MediumJanuary 12, 2026
• avahi Avahi has a reachable assertion in avahi_wide_area_scan_cache CVE-2025-68276 Fix available 5.5 MediumJanuary 12, 2026
• avahi Avahi: simple protocol server ignores accepts unlimited connections and logs failures without limit CVE-2025-59529 Fix available 5.5 MediumDecember 18, 2025
• avahi, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Avahi: avahi wide-area dns uses constant source port CVE-2024-52615 Fix available 5.3 MediumNovember 19, 2024
• avahi, fedora, red hat enterprise linux 6 +4 more +6 more Reachable assertion in avahi_alternative_host_name CVE-2023-38473 Fix available 6.2 MediumOctober 18, 2023
• avahi, fedora, red hat enterprise linux 6 +4 more +6 more Reachable assertion in avahi_escape_label CVE-2023-38470 Fix available 6.2 MediumOctober 18, 2023
• avahi, fedora, red hat enterprise linux 6 +4 more +6 more Reachable assertion in avahi_rdata_parse CVE-2023-38472 Fix available 6.2 MediumOctober 18, 2023
• avahi, fedora, red hat enterprise linux 6 +4 more +6 more Reachable assertion in dbus_set_host_name CVE-2023-38471 Fix available 6.2 MediumOctober 18, 2023
• avahi, fedora, red hat enterprise linux 6 +4 more +6 more Reachable assertion in avahi_dns_packet_append_record CVE-2023-38469 Fix available 6.2 MediumOctober 18, 2023
• avahi, fedoraproject fedora, redhat enterprise linux +2 more A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a... CVE-2023-1981 Fix available 5.5 MediumApril 12, 2023
• avahi A flaw was found in avahi 0.8-5. A reachable assertion is present in... CVE-2021-3502 Fix available 5.5 MediumMay 7, 2021
• avahi, debian linux +1 more A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of... CVE-2021-3468 Fix available 5.5 MediumMay 4, 2021
• avahi, debian linux +1 more avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc... CVE-2021-26720 Fix available 7.8 HighFebruary 17, 2021
• avahi, canonical ubuntu linux +1 more avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with... CVE-2017-6519 Fix available 9.1 CriticalApril 30, 2017
• avahi, canonical ubuntu linux, debian linux +2 more +4 more avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a... CVE-2011-1002 Fix available EPSS 29.4% 5.0 MediumFebruary 22, 2011
• avahi The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25... CVE-2010-2244 Fix available 4.3 MediumJuly 7, 2010
• avahi avahi-daemon The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0... CVE-2009-0758 Fix available 7.8 HighMarch 3, 2009
• avahi The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in... CVE-2008-5081 Public exploitFix available EPSS 59.2% 5.0 MediumDecember 17, 2008
• avahi The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service (exit) via... CVE-2007-3372 Fix available 2.1 LowJune 22, 2007
• avahi The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to... CVE-2006-6870 Fix available 5.0 MediumDecember 31, 2006
• avahi Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they... CVE-2006-5461 Fix available 2.1 LowNovember 14, 2006
• avahi Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code... CVE-2006-2289 Fix available 2.1 LowMay 9, 2006
• avahi Avahi before 0.6.10 allows local users to cause a denial of service (mDNS/DNS-SD service... CVE-2006-2288 Fix available 3.6 LowMay 9, 2006