AV
Product
avahi
24
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 14Low 0
Watch
Add avahi to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-6519 | 9.1 | May 1 | avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a… Affected: through 0.6.32; 0.7 |
| CVE-2021-26720 | 7.8 | Feb 17 | avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of… Affected: through 0.8-4 |
| CVE-2026-24401 | 6.5 | Jan 24 | Avahi has Uncontrolled Recursion in lookup_handle_cname function Affected: < 0.9-rc3 |
| CVE-2025-68471 | 6.5 | Jan 12 | Avahi has a reachable assertion in lookup_start Affected: <= 0.9-rc2 |
| CVE-2025-68468 | 6.5 | Jan 12 | Avahi has a reachable assertion in lookup_multicast_callback Affected: <= 0.9-rc2 |
| CVE-2026-34933 | 5.5 | Apr 3 | Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon Affected: < 0.9-rc4 |
| CVE-2025-68276 | 5.5 | Jan 12 | Avahi has a reachable assertion in avahi_wide_area_scan_cache Affected: <= 0.9-rc2 |
| CVE-2025-59529 | 5.5 | Dec 18 | Avahi: simple protocol server ignores accepts unlimited connections and logs failures without limit Affected: <= 0.9-rc5 |
| CVE-2023-38473 | 5.5 | Nov 2 | A vulnerability was found in Avahi Affected: before 0.9 |
| CVE-2023-38472 | 5.5 | Nov 2 | A vulnerability was found in Avahi Affected: before 0.9 |
| CVE-2023-38471 | 5.5 | Nov 2 | A vulnerability was found in Avahi Affected: before 0.9 |
| CVE-2023-38470 | 5.5 | Nov 2 | A vulnerability was found in Avahi Affected: before 0.9 |
| CVE-2023-38469 | 5.5 | Nov 2 | Reachable assertion in avahi_dns_packet_append_record Affected: before 0.9-rc1 |
| CVE-2023-1981 | 5.5 | May 26 | A vulnerability was found in the avahi library Affected: 0.7-20 |
| CVE-2021-3468 | 5.5 | Jun 2 | A flaw was found in avahi in versions 0.6 up to 0.8 Affected: 0.6 through 0.8 |
| CVE-2021-3502 | 5.5 | May 7 | A flaw was found in avahi 0.8-5 Affected: 0.8-5 |
| CVE-2011-1002 | – | Feb 22 | avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet… Affected: through 0.6.28; 0.1; 0.2; 0.3; 0.4; 0.5; +29 more |
| CVE-2010-2244 | – | Jul 8 | The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service (assertion failure and daemon… Affected: 0.6.16; 0.6.25 |
| CVE-2008-5081 | – | Dec 17 | The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash)… Affected: through 0.6.23; 0.1; 0.2; 0.3; 0.4; 0.5; +24 more |
| CVE-2007-3372 | – | Jun 22 | The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service (exit) via empty TXT data over D-Bus, which triggers an assert error Affected: through 0.6.19 |
| CVE-2006-6870 | – | Dec 31 | The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service (infinite loop) via a crafted compressed DNS response… Affected: 0.6.7; 0.6.8; 0.6.9; 0.6.10; 0.6.11; 0.6.12; +3 more |
| CVE-2006-5461 | – | Nov 14 | Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof… Affected: through 0.6.14 |
| CVE-2006-2289 | – | May 10 | Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors Affected: 0.6.7; 0.6.8; 0.6.9 |
| CVE-2006-2288 | – | May 10 | Avahi before 0.6.10 allows local users to cause a denial of service (mDNS/DNS-SD service disconnect) via unspecified mDNS name conflicts Affected: 0.6.7; 0.6.8; 0.6.9 |
Showing 24