AV
Vendor
avahi
25
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-34933 | AV avahi avahi | 5.5 | Apr 3 | Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon |
| CVE-2026-24401 | AV avahi avahi | 6.5 | Jan 24 | Avahi has Uncontrolled Recursion in lookup_handle_cname function |
| CVE-2025-68471 | AV avahi avahi | 6.5 | Jan 12 | Avahi has a reachable assertion in lookup_start |
| CVE-2025-68468 | AV avahi avahi | 6.5 | Jan 12 | Avahi has a reachable assertion in lookup_multicast_callback |
| CVE-2025-68276 | AV avahi avahi | 5.5 | Jan 12 | Avahi has a reachable assertion in avahi_wide_area_scan_cache |
| CVE-2025-59529 | AV avahi avahi | 5.5 | Dec 18 | Avahi: simple protocol server ignores accepts unlimited connections and logs failures without limit |
| CVE-2023-38473 | AV Avahi Avahi | 5.5 | Nov 2 | A vulnerability was found in Avahi |
| CVE-2023-38472 | AV Avahi Avahi | 5.5 | Nov 2 | A vulnerability was found in Avahi |
| CVE-2023-38471 | AV Avahi Avahi | 5.5 | Nov 2 | A vulnerability was found in Avahi |
| CVE-2023-38470 | AV Avahi Avahi | 5.5 | Nov 2 | A vulnerability was found in Avahi |
| CVE-2023-38469 | AV avahi avahi | 5.5 | Nov 2 | Reachable assertion in avahi_dns_packet_append_record |
| CVE-2023-1981 | AV Avahi Avahi | 5.5 | May 26 | A vulnerability was found in the avahi library |
| CVE-2021-3468 | AV Avahi Avahi | 5.5 | Jun 2 | A flaw was found in avahi in versions 0.6 up to 0.8 |
| CVE-2021-3502 | AV Avahi Avahi | 5.5 | May 7 | A flaw was found in avahi 0.8-5 |
| CVE-2021-26720 | AV Avahi Avahi | 7.8 | Feb 17 | avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of… |
| CVE-2017-6519 | AV Avahi Avahi | 9.1 | May 1 | avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a… |
| CVE-2011-1002 | AV Avahi Avahi | – | Feb 22 | avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet… |
| CVE-2010-2244 | AV Avahi Avahi | – | Jul 8 | The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service (assertion failure and daemon… |
| CVE-2009-0758 | AV Avahi-daemon Avahi | – | Mar 3 | The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing… |
| CVE-2008-5081 | AV Avahi Avahi | – | Dec 17 | The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash)… |
| CVE-2007-3372 | AV Avahi Avahi | – | Jun 22 | The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service (exit) via empty TXT data over D-Bus, which triggers an assert error |
| CVE-2006-6870 | AV Avahi Avahi | – | Dec 31 | The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service (infinite loop) via a crafted compressed DNS response… |
| CVE-2006-5461 | AV Avahi Avahi | – | Nov 14 | Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof… |
| CVE-2006-2289 | AV Avahi Avahi | – | May 10 | Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors |
| CVE-2006-2288 | AV Avahi Avahi | – | May 10 | Avahi before 0.6.10 allows local users to cause a denial of service (mDNS/DNS-SD service disconnect) via unspecified mDNS name conflicts |