Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/582781?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "type": "deb", "namespace": "debian", "name": "avahi", "version": "0.8-10+deb12u1", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "0.8-14", "latest_non_vulnerable_version": "0.8-18", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/64887?format=api", "vulnerability_id": "VCID-1gkw-3zt3-sbb9", "summary": "avahi: Avahi: Denial of Service via recursive CNAME record in mDNS response", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-24401.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-24401.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-24401", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13259", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13039", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13326", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13124", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13205", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13256", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13225", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13188", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13137", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-24401" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24401", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24401" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1126342", "reference_id": "1126342", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1126342" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2432534", "reference_id": "2432534", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2432534" }, { "reference_url": "https://github.com/avahi/avahi/issues/501", "reference_id": "501", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-26T16:14:24Z/" } ], "url": "https://github.com/avahi/avahi/issues/501" }, { "reference_url": "https://github.com/avahi/avahi/commit/78eab31128479f06e30beb8c1cbf99dd921e2524", "reference_id": "78eab31128479f06e30beb8c1cbf99dd921e2524", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-26T16:14:24Z/" } ], "url": "https://github.com/avahi/avahi/commit/78eab31128479f06e30beb8c1cbf99dd921e2524" }, { "reference_url": "https://github.com/avahi/avahi/security/advisories/GHSA-h4vp-5m8j-f6w3", "reference_id": "GHSA-h4vp-5m8j-f6w3", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-26T16:14:24Z/" } ], "url": "https://github.com/avahi/avahi/security/advisories/GHSA-h4vp-5m8j-f6w3" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-24401" ], "risk_score": 3.0, "exploitability": "0.5", "weighted_severity": "5.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1gkw-3zt3-sbb9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/65172?format=api", "vulnerability_id": "VCID-1qch-uvj9-nucr", "summary": "avahi: Avahi: Denial of Service via unsolicited CNAME announcements", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-68471.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-68471.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-68471", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03992", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.0396", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04008", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04023", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04029", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04047", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04019", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04005", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03977", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-68471" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68471", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68471" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125419", "reference_id": "1125419", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125419" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428717", "reference_id": "2428717", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428717" }, { "reference_url": "https://github.com/avahi/avahi/issues/678", "reference_id": "678", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-12T18:42:17Z/" } ], "url": "https://github.com/avahi/avahi/issues/678" }, { "reference_url": "https://github.com/avahi/avahi/commit/9c6eb53bf2e290aed84b1f207e3ce35c54cc0aa1", "reference_id": "9c6eb53bf2e290aed84b1f207e3ce35c54cc0aa1", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-12T18:42:17Z/" } ], "url": "https://github.com/avahi/avahi/commit/9c6eb53bf2e290aed84b1f207e3ce35c54cc0aa1" }, { "reference_url": "https://github.com/avahi/avahi/security/advisories/GHSA-56rf-42xr-qmmg", "reference_id": "GHSA-56rf-42xr-qmmg", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-12T18:42:17Z/" } ], "url": "https://github.com/avahi/avahi/security/advisories/GHSA-56rf-42xr-qmmg" }, { "reference_url": "https://usn.ubuntu.com/7967-1/", "reference_id": "USN-7967-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7967-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-68471" ], "risk_score": 3.0, "exploitability": "0.5", "weighted_severity": "5.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1qch-uvj9-nucr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/65173?format=api", "vulnerability_id": "VCID-c1wj-a2qm-wbhr", "summary": "avahi: Avahi: Denial of Service via crafted mDNS/DNS-SD announcements", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-68468.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-68468.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-68468", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00014", "scoring_system": "epss", "scoring_elements": "0.02483", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00014", "scoring_system": "epss", "scoring_elements": "0.02469", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00014", "scoring_system": "epss", "scoring_elements": "0.02496", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00014", "scoring_system": "epss", "scoring_elements": "0.02499", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00014", "scoring_system": "epss", "scoring_elements": "0.0252", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00014", "scoring_system": "epss", "scoring_elements": "0.02497", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00014", "scoring_system": "epss", "scoring_elements": "0.02487", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00014", "scoring_system": "epss", "scoring_elements": "0.02485", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-68468" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68468", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68468" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125418", "reference_id": "1125418", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125418" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428714", "reference_id": "2428714", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428714" }, { "reference_url": "https://github.com/avahi/avahi/issues/683", "reference_id": "683", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-12T18:41:41Z/" } ], "url": "https://github.com/avahi/avahi/issues/683" }, { "reference_url": "https://github.com/avahi/avahi/commit/f66be13d7f31a3ef806d226bf8b67240179d309a", "reference_id": "f66be13d7f31a3ef806d226bf8b67240179d309a", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-12T18:41:41Z/" } ], "url": "https://github.com/avahi/avahi/commit/f66be13d7f31a3ef806d226bf8b67240179d309a" }, { "reference_url": "https://github.com/avahi/avahi/security/advisories/GHSA-cp79-r4x9-vf52", "reference_id": "GHSA-cp79-r4x9-vf52", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-12T18:41:41Z/" } ], "url": "https://github.com/avahi/avahi/security/advisories/GHSA-cp79-r4x9-vf52" }, { "reference_url": "https://usn.ubuntu.com/7967-1/", "reference_id": "USN-7967-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7967-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-68468" ], "risk_score": 3.0, "exploitability": "0.5", "weighted_severity": "5.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c1wj-a2qm-wbhr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/72796?format=api", "vulnerability_id": "VCID-nbtb-77zf-kkh8", "summary": "avahi: Avahi Wide-Area DNS Predictable Transaction IDs", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-52616.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-52616.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-52616", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00083", "scoring_system": "epss", "scoring_elements": "0.24327", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00083", "scoring_system": "epss", "scoring_elements": "0.24279", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00083", "scoring_system": "epss", "scoring_elements": "0.24347", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00083", "scoring_system": "epss", "scoring_elements": "0.24391", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00083", "scoring_system": "epss", "scoring_elements": "0.24408", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00083", "scoring_system": "epss", "scoring_elements": "0.24366", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00083", "scoring_system": "epss", "scoring_elements": "0.24309", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24921", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24881", "published_at": "2026-04-02T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-52616" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52616", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52616" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1088111", "reference_id": "1088111", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1088111" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2326429", "reference_id": "2326429", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-21T21:06:40Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2326429" }, { "reference_url": "https://github.com/avahi/avahi/pull/577", "reference_id": "577", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-21T21:06:40Z/" } ], "url": "https://github.com/avahi/avahi/pull/577" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream", "reference_id": "cpe:/a:redhat:enterprise_linux:9::appstream", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::crb", "reference_id": "cpe:/a:redhat:enterprise_linux:9::crb", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::crb" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4", "reference_id": "cpe:/a:redhat:openshift:4", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7", "reference_id": "cpe:/o:redhat:enterprise_linux:7", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8", "reference_id": "cpe:/o:redhat:enterprise_linux:8", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos", "reference_id": "cpe:/o:redhat:enterprise_linux:9::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2024-52616", "reference_id": "CVE-2024-52616", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-21T21:06:40Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2024-52616" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7437", "reference_id": "RHSA-2025:7437", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-21T21:06:40Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:7437" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2024-52616" ], "risk_score": 2.4, "exploitability": "0.5", "weighted_severity": "4.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nbtb-77zf-kkh8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/65174?format=api", "vulnerability_id": "VCID-unwy-8b3g-hbbx", "summary": "avahi: Avahi: Denial of Service via D-Bus record browsers with AVAHI_LOOKUP_USE_WIDE_AREA flag", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-68276.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-68276.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-68276", "reference_id": "", "reference_type": "", "scores": [ { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00314", "published_at": "2026-04-02T12:55:00Z" }, { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00296", "published_at": "2026-04-16T12:55:00Z" }, { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00313", "published_at": "2026-04-04T12:55:00Z" }, { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00304", "published_at": "2026-04-07T12:55:00Z" }, { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00303", "published_at": "2026-04-08T12:55:00Z" }, { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00302", "published_at": "2026-04-09T12:55:00Z" }, { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00301", "published_at": "2026-04-11T12:55:00Z" }, { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.003", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-68276" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68276", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68276" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125417", "reference_id": "1125417", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125417" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428713", "reference_id": "2428713", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428713" }, { "reference_url": "https://github.com/avahi/avahi/pull/806", "reference_id": "806", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-12T18:41:12Z/" } ], "url": "https://github.com/avahi/avahi/pull/806" }, { "reference_url": "https://github.com/avahi/avahi/commit/ede7048475c5d47d53890e3bc1350dda8e0b3688", "reference_id": "ede7048475c5d47d53890e3bc1350dda8e0b3688", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-12T18:41:12Z/" } ], "url": "https://github.com/avahi/avahi/commit/ede7048475c5d47d53890e3bc1350dda8e0b3688" }, { "reference_url": "https://github.com/avahi/avahi/security/advisories/GHSA-mhf3-865v-g5rc", "reference_id": "GHSA-mhf3-865v-g5rc", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-12T18:41:12Z/" } ], "url": "https://github.com/avahi/avahi/security/advisories/GHSA-mhf3-865v-g5rc" }, { "reference_url": "https://usn.ubuntu.com/7967-1/", "reference_id": "USN-7967-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7967-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-68276" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-unwy-8b3g-hbbx" } ], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/78464?format=api", "vulnerability_id": "VCID-4xxj-5827-gqck", "summary": "avahi: Reachable assertion in avahi_alternative_host_name", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38473.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38473.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-38473", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01013", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01026", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.0104", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01024", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01019", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01027", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01037", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01042", "published_at": "2026-04-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-38473" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38473", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38473" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054880", "reference_id": "1054880", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054880" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2191694", "reference_id": "2191694", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T14:00:14Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2191694" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6", "reference_id": "cpe:/o:redhat:enterprise_linux:6", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7", "reference_id": "cpe:/o:redhat:enterprise_linux:7", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8", "reference_id": "cpe:/o:redhat:enterprise_linux:8", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9", "reference_id": "cpe:/o:redhat:enterprise_linux:9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2023-38473", "reference_id": "CVE-2023-38473", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T14:00:14Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2023-38473" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7836", "reference_id": "RHSA-2023:7836", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7836" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0418", "reference_id": "RHSA-2024:0418", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0418" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0576", "reference_id": "RHSA-2024:0576", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0576" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2433", "reference_id": "RHSA-2024:2433", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2433" }, { "reference_url": "https://usn.ubuntu.com/6487-1/", "reference_id": "USN-6487-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6487-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582780?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u3?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582782?format=api", "purl": "pkg:deb/debian/avahi@0.8-14?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-14%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-38473" ], "risk_score": 2.8, "exploitability": "0.5", "weighted_severity": "5.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4xxj-5827-gqck" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/85735?format=api", "vulnerability_id": "VCID-7afj-kkdv-zbez", "summary": "avahi: Multicast DNS responds to unicast queries outside of local network", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6519.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-6519.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-6519", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01134", "scoring_system": "epss", "scoring_elements": "0.78301", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.01134", "scoring_system": "epss", "scoring_elements": "0.78384", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.01134", "scoring_system": "epss", "scoring_elements": "0.78307", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.01134", "scoring_system": "epss", "scoring_elements": "0.78338", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.01134", "scoring_system": "epss", "scoring_elements": "0.78321", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.01134", "scoring_system": "epss", "scoring_elements": "0.78347", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.01134", "scoring_system": "epss", "scoring_elements": "0.78353", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.01134", "scoring_system": "epss", "scoring_elements": "0.78379", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.01134", "scoring_system": "epss", "scoring_elements": "0.78362", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.01134", "scoring_system": "epss", "scoring_elements": "0.78355", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-6519" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6519", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6519" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/lathiat/avahi/issues/203", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-03T21:57:26Z/" } ], "url": "https://github.com/lathiat/avahi/issues/203" }, { "reference_url": "https://github.com/lathiat/avahi/issues/203#issuecomment-449536790", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-03T21:57:26Z/" } ], "url": "https://github.com/lathiat/avahi/issues/203#issuecomment-449536790" }, { "reference_url": "https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-03T21:57:26Z/" } ], "url": "https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E" }, { "reference_url": "https://www.secfu.net/advisories", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-03T21:57:26Z/" } ], "url": "https://www.secfu.net/advisories" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1426712", "reference_id": "1426712", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-03T21:57:26Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1426712" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=917047", "reference_id": "917047", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=917047" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.7:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.7:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.7:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6519", "reference_id": "CVE-2017-6519", "reference_type": "", "scores": [ { "value": "6.4", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:P/I:N/A:P" }, { "value": "9.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6519" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1176", "reference_id": "RHSA-2020:1176", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1176" }, { "reference_url": "https://usn.ubuntu.com/3876-1/", "reference_id": "USN-3876-1", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-03T21:57:26Z/" } ], "url": "https://usn.ubuntu.com/3876-1/" }, { "reference_url": "https://usn.ubuntu.com/3876-2/", "reference_id": "USN-3876-2", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-03T21:57:26Z/" } ], "url": "https://usn.ubuntu.com/3876-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/585448?format=api", "purl": "pkg:deb/debian/avahi@0.7-5?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.7-5%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2017-6519" ], "risk_score": 4.1, "exploitability": "0.5", "weighted_severity": "8.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7afj-kkdv-zbez" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/78460?format=api", "vulnerability_id": "VCID-82ze-32xz-pqgn", "summary": "avahi: Reachable assertion in avahi_dns_packet_append_record", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38469.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38469.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-38469", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01013", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01026", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.0104", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01024", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01019", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01027", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01037", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01042", "published_at": "2026-04-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-38469" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38469", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38469" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054876", "reference_id": "1054876", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054876" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2191687", "reference_id": "2191687", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T13:53:35Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2191687" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6", "reference_id": "cpe:/o:redhat:enterprise_linux:6", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7", "reference_id": "cpe:/o:redhat:enterprise_linux:7", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8", "reference_id": "cpe:/o:redhat:enterprise_linux:8", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9", "reference_id": "cpe:/o:redhat:enterprise_linux:9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2023-38469", "reference_id": "CVE-2023-38469", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T13:53:35Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2023-38469" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7836", "reference_id": "RHSA-2023:7836", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7836" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0418", "reference_id": "RHSA-2024:0418", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0418" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0576", "reference_id": "RHSA-2024:0576", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0576" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2433", "reference_id": "RHSA-2024:2433", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2433" }, { "reference_url": "https://usn.ubuntu.com/6487-1/", "reference_id": "USN-6487-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6487-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582780?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u3?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582782?format=api", "purl": "pkg:deb/debian/avahi@0.8-14?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-14%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-38469" ], "risk_score": 2.8, "exploitability": "0.5", "weighted_severity": "5.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-82ze-32xz-pqgn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/78462?format=api", "vulnerability_id": "VCID-9mjb-81e1-qbau", "summary": "avahi: Reachable assertion in dbus_set_host_name", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38471.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38471.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-38471", "reference_id": "", "reference_type": "", "scores": [ { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.0067", "published_at": "2026-04-16T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00695", "published_at": "2026-04-02T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00692", "published_at": "2026-04-08T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00684", "published_at": "2026-04-11T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00677", "published_at": "2026-04-13T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00688", "published_at": "2026-04-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-38471" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38471", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38471" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054878", "reference_id": "1054878", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054878" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2191691", "reference_id": "2191691", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T13:54:56Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2191691" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6", "reference_id": "cpe:/o:redhat:enterprise_linux:6", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7", "reference_id": "cpe:/o:redhat:enterprise_linux:7", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8", "reference_id": "cpe:/o:redhat:enterprise_linux:8", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9", "reference_id": "cpe:/o:redhat:enterprise_linux:9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2023-38471", "reference_id": "CVE-2023-38471", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T13:54:56Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2023-38471" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7836", "reference_id": "RHSA-2023:7836", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7836" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0418", "reference_id": "RHSA-2024:0418", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0418" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0576", "reference_id": "RHSA-2024:0576", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0576" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2433", "reference_id": "RHSA-2024:2433", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2433" }, { "reference_url": "https://usn.ubuntu.com/6487-1/", "reference_id": "USN-6487-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6487-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582780?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u3?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582782?format=api", "purl": "pkg:deb/debian/avahi@0.8-14?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-14%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-38471" ], "risk_score": 2.8, "exploitability": "0.5", "weighted_severity": "5.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9mjb-81e1-qbau" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/78461?format=api", "vulnerability_id": "VCID-9w4x-33np-2fg4", "summary": "avahi: Reachable assertion in avahi_escape_label", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38470.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38470.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-38470", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01013", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01026", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.0104", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01024", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01019", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01027", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01037", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01042", "published_at": "2026-04-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-38470" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38470", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38470" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054877", "reference_id": "1054877", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054877" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2191690", "reference_id": "2191690", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T13:54:46Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2191690" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6", "reference_id": "cpe:/o:redhat:enterprise_linux:6", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7", "reference_id": "cpe:/o:redhat:enterprise_linux:7", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8", "reference_id": "cpe:/o:redhat:enterprise_linux:8", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9", "reference_id": "cpe:/o:redhat:enterprise_linux:9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2023-38470", "reference_id": "CVE-2023-38470", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T13:54:46Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2023-38470" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7836", "reference_id": "RHSA-2023:7836", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7836" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0418", "reference_id": "RHSA-2024:0418", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0418" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0576", "reference_id": "RHSA-2024:0576", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0576" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2433", "reference_id": "RHSA-2024:2433", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2433" }, { "reference_url": "https://usn.ubuntu.com/6487-1/", "reference_id": "USN-6487-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6487-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582780?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u3?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582782?format=api", "purl": "pkg:deb/debian/avahi@0.8-14?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-14%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-38470" ], "risk_score": 2.8, "exploitability": "0.5", "weighted_severity": "5.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9w4x-33np-2fg4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51014?format=api", "vulnerability_id": "VCID-b6c5-yjhz-x3hh", "summary": "Multiple vulnerabilities were found in Avahi, allowing for Denial\n of Service.", "references": [ { "reference_url": "http://avahi.org/ticket/325", "reference_id": "", "reference_type": "", "scores": [], "url": "http://avahi.org/ticket/325" }, { "reference_url": "http://git.0pointer.de/?p=avahi.git%3Ba=commit%3Bh=46109dfec75534fe270c0ab902576f685d5ab3a6", "reference_id": "", "reference_type": "", "scores": [], "url": "http://git.0pointer.de/?p=avahi.git%3Ba=commit%3Bh=46109dfec75534fe270c0ab902576f685d5ab3a6" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055858.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055858.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html" }, { "reference_url": "http://openwall.com/lists/oss-security/2011/02/18/1", "reference_id": "", "reference_type": "", "scores": [], "url": "http://openwall.com/lists/oss-security/2011/02/18/1" }, { "reference_url": "http://openwall.com/lists/oss-security/2011/02/18/4", "reference_id": "", "reference_type": "", "scores": [], "url": "http://openwall.com/lists/oss-security/2011/02/18/4" }, { "reference_url": "http://osvdb.org/70948", "reference_id": "", "reference_type": "", "scores": [], "url": "http://osvdb.org/70948" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1002.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1002.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-1002", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.6883", "scoring_system": "epss", "scoring_elements": "0.98631", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.6883", "scoring_system": "epss", "scoring_elements": "0.98613", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.6883", "scoring_system": "epss", "scoring_elements": "0.98615", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.6883", "scoring_system": "epss", "scoring_elements": "0.98618", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.6883", "scoring_system": "epss", "scoring_elements": "0.9862", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.6883", "scoring_system": "epss", "scoring_elements": "0.98622", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.6883", "scoring_system": "epss", "scoring_elements": "0.98623", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.6883", "scoring_system": "epss", "scoring_elements": "0.98626", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.6883", "scoring_system": "epss", "scoring_elements": "0.98627", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-1002" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1002", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1002" }, { "reference_url": "http://secunia.com/advisories/43361", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/43361" }, { "reference_url": "http://secunia.com/advisories/43465", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/43465" }, { "reference_url": "http://secunia.com/advisories/43605", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/43605" }, { "reference_url": "http://secunia.com/advisories/43673", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/43673" }, { "reference_url": "http://secunia.com/advisories/44131", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/44131" }, { "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65524", "reference_id": "", "reference_type": "", "scores": [], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65524" }, { "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65525", "reference_id": "", "reference_type": "", "scores": [], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65525" }, { "reference_url": "http://ubuntu.com/usn/usn-1084-1", "reference_id": "", "reference_type": "", "scores": [], "url": "http://ubuntu.com/usn/usn-1084-1" }, { "reference_url": "http://www.debian.org/security/2011/dsa-2174", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.debian.org/security/2011/dsa-2174" }, { "reference_url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:037", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:037" }, { "reference_url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:040", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:040" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2011/02/22/9", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.openwall.com/lists/oss-security/2011/02/22/9" }, { "reference_url": "http://www.redhat.com/support/errata/RHSA-2011-0436.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.redhat.com/support/errata/RHSA-2011-0436.html" }, { "reference_url": "http://www.redhat.com/support/errata/RHSA-2011-0779.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.redhat.com/support/errata/RHSA-2011-0779.html" }, { "reference_url": "http://www.securityfocus.com/bid/46446", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/46446" }, { "reference_url": "http://www.vupen.com/english/advisories/2011/0448", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.vupen.com/english/advisories/2011/0448" }, { "reference_url": "http://www.vupen.com/english/advisories/2011/0499", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.vupen.com/english/advisories/2011/0499" }, { "reference_url": "http://www.vupen.com/english/advisories/2011/0511", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.vupen.com/english/advisories/2011/0511" }, { "reference_url": "http://www.vupen.com/english/advisories/2011/0565", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.vupen.com/english/advisories/2011/0565" }, { "reference_url": "http://www.vupen.com/english/advisories/2011/0601", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.vupen.com/english/advisories/2011/0601" }, { "reference_url": "http://www.vupen.com/english/advisories/2011/0670", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.vupen.com/english/advisories/2011/0670" }, { "reference_url": "http://www.vupen.com/english/advisories/2011/0969", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.vupen.com/english/advisories/2011/0969" }, { "reference_url": "http://xorl.wordpress.com/2011/02/20/cve-2011-1002-avahi-daemon-remote-denial-of-service/", "reference_id": "", "reference_type": "", "scores": [], "url": "http://xorl.wordpress.com/2011/02/20/cve-2011-1002-avahi-daemon-remote-denial-of-service/" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614785", "reference_id": "614785", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614785" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=667187", "reference_id": "667187", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=667187" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.1:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.1:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.1:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.2:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.2:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.2:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.3:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.3:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.3:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.4:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.4:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.4:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.5:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.5:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.5:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.5.1:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.5.1:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.5.1:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.5.2:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.5.2:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.5.2:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.1:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.1:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.1:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.10:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.10:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.10:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.11:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.11:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.11:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.12:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.12:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.12:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.13:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.13:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.13:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.14:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.14:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.14:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.15:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.15:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.15:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.16:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.16:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.16:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.17:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.17:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.17:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.18:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.18:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.18:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.19:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.19:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.19:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.2:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.2:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.2:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.20:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.20:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.20:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.21:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.21:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.21:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.22:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.22:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.22:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.23:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.23:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.23:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.24:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.24:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.24:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.25:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.25:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.25:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.26:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.26:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.26:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.27:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.27:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.27:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.3:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.3:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.3:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.4:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.4:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.4:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.5:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.5:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.5:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.6:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.6:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.6:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.8:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.8:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.8:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.9:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.9:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.9:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1002", "reference_id": "CVE-2011-1002", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1002" }, { "reference_url": "https://security.gentoo.org/glsa/201110-17", "reference_id": "GLSA-201110-17", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201110-17" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:0436", "reference_id": "RHSA-2011:0436", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:0436" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:0779", "reference_id": "RHSA-2011:0779", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:0779" }, { "reference_url": "https://usn.ubuntu.com/1084-1/", "reference_id": "USN-1084-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1084-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/585550?format=api", "purl": "pkg:deb/debian/avahi@0.6.28-4?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.6.28-4%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2011-1002" ], "risk_score": 2.2, "exploitability": "0.5", "weighted_severity": "4.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-b6c5-yjhz-x3hh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/51013?format=api", "vulnerability_id": "VCID-daum-72mg-pkhn", "summary": "Multiple vulnerabilities were found in Avahi, allowing for Denial\n of Service.", "references": [ { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043800.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043800.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043820.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043820.html" }, { "reference_url": "http://marc.info/?l=oss-security&m=127748459505200&w=2", "reference_id": "", "reference_type": "", "scores": [], "url": "http://marc.info/?l=oss-security&m=127748459505200&w=2" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2244.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2244.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2010-2244", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00907", "scoring_system": "epss", "scoring_elements": "0.75795", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00907", "scoring_system": "epss", "scoring_elements": "0.757", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00907", "scoring_system": "epss", "scoring_elements": "0.75702", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00907", "scoring_system": "epss", "scoring_elements": "0.75733", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00907", "scoring_system": "epss", "scoring_elements": "0.75712", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00907", "scoring_system": "epss", "scoring_elements": "0.75746", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00907", "scoring_system": "epss", "scoring_elements": "0.75757", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00907", "scoring_system": "epss", "scoring_elements": "0.75781", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00907", "scoring_system": "epss", "scoring_elements": "0.75763", "published_at": "2026-04-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2010-2244" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2244", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2244" }, { "reference_url": "http://www.debian.org/security/2010/dsa-2086", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.debian.org/security/2010/dsa-2086" }, { "reference_url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:204", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:204" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2010/06/23/4", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.openwall.com/lists/oss-security/2010/06/23/4" }, { "reference_url": "http://www.securitytracker.com/id?1024200", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id?1024200" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=607293", "reference_id": "607293", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=607293" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.16:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.16:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.16:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.25:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.25:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.25:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2244", "reference_id": "CVE-2010-2244", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:N/A:P" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2244" }, { "reference_url": "https://security.gentoo.org/glsa/201110-17", "reference_id": "GLSA-201110-17", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201110-17" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2010:0528", "reference_id": "RHSA-2010:0528", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2010:0528" }, { "reference_url": "https://usn.ubuntu.com/992-1/", "reference_id": "USN-992-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/992-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/586048?format=api", "purl": "pkg:deb/debian/avahi@0.6.26-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.6.26-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2010-2244" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-daum-72mg-pkhn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/94678?format=api", "vulnerability_id": "VCID-ezsn-vvex-gkah", "summary": "avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects the packaging for Debian GNU/Linux (used indirectly by SUSE), not the upstream Avahi product.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-26720", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21158", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21148", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.213", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21355", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21109", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21189", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21251", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.2126", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21219", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21166", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-26720" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26720", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26720" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/585801?format=api", "purl": "pkg:deb/debian/avahi@0.8-4?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-4%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2021-26720" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ezsn-vvex-gkah" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37605?format=api", "vulnerability_id": "VCID-ffax-863u-skce", "summary": "A Denial of Service vulnerability has been discovered in Avahi.", "references": [ { "reference_url": "http://avahi.org/milestone/Avahi%200.6.24", "reference_id": "", "reference_type": "", "scores": [], "url": "http://avahi.org/milestone/Avahi%200.6.24" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5081.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5081.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2008-5081", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.77078", "scoring_system": "epss", "scoring_elements": "0.98968", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.77078", "scoring_system": "epss", "scoring_elements": "0.98956", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.77078", "scoring_system": "epss", "scoring_elements": "0.98958", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.77078", "scoring_system": "epss", "scoring_elements": "0.9896", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.77078", "scoring_system": "epss", "scoring_elements": "0.98962", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.77078", "scoring_system": "epss", "scoring_elements": "0.98964", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.77078", "scoring_system": "epss", "scoring_elements": "0.98965", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.77078", "scoring_system": "epss", "scoring_elements": "0.98966", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2008-5081" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5081", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5081" }, { "reference_url": "http://secunia.com/advisories/33153", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/33153" }, { "reference_url": "http://secunia.com/advisories/33220", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/33220" }, { "reference_url": "http://secunia.com/advisories/33279", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/33279" }, { "reference_url": "http://secunia.com/advisories/33475", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/33475" }, { "reference_url": "http://security.gentoo.org/glsa/glsa-200901-11.xml", "reference_id": "", "reference_type": "", "scores": [], "url": "http://security.gentoo.org/glsa/glsa-200901-11.xml" }, { "reference_url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9987", "reference_id": "", "reference_type": "", "scores": [], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9987" }, { "reference_url": "https://www.exploit-db.com/exploits/7520", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.exploit-db.com/exploits/7520" }, { "reference_url": "http://www.debian.org/security/2008/dsa-1690", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.debian.org/security/2008/dsa-1690" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2008/12/14/1", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.openwall.com/lists/oss-security/2008/12/14/1" }, { "reference_url": "http://www.securityfocus.com/bid/32825", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/32825" }, { "reference_url": "http://www.ubuntu.com/usn/usn-696-1", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.ubuntu.com/usn/usn-696-1" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=475964", "reference_id": "475964", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=475964" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508700", "reference_id": "508700", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508700" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.1:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.1:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.1:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.2:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.2:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.2:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.3:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.3:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.3:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.4:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.4:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.4:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.5:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.5:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.5:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.5.1:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.5.1:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.5.1:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.5.2:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.5.2:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.5.2:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.1:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.1:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.1:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.10:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.10:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.10:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.11:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.11:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.11:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.12:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.12:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.12:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.13:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.13:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.13:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.14:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.14:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.14:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.15:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.15:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.15:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.16:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.16:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.16:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.17:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.17:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.17:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.18:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.18:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.18:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.19:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.19:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.19:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.2:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.2:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.2:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.20:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.20:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.20:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.21:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.21:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.21:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.22:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.22:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.22:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.3:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.3:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.3:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.4:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.4:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.4:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.5:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.5:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.5:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.6:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.6:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.6:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.8:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.8:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.8:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.9:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.9:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.9:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5081", "reference_id": "CVE-2008-5081", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5081" }, { "reference_url": "https://security.gentoo.org/glsa/200901-11", "reference_id": "GLSA-200901-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200901-11" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/7520.c", "reference_id": "OSVDB-50929;CVE-2008-5081", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/7520.c" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2009:0013", "reference_id": "RHSA-2009:0013", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2009:0013" }, { "reference_url": "https://usn.ubuntu.com/696-1/", "reference_id": "USN-696-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/696-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/586275?format=api", "purl": "pkg:deb/debian/avahi@0.6.23-3?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.6.23-3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2008-5081" ], "risk_score": 9.0, "exploitability": "2.0", "weighted_severity": "4.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ffax-863u-skce" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/79474?format=api", "vulnerability_id": "VCID-g2fk-pmey-ekh9", "summary": "avahi: avahi-daemon can be crashed via DBus", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-1981.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-1981.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-1981", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03383", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.0345", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03479", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03502", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03458", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.0343", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03405", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03463", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03476", "published_at": "2026-04-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-1981" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1981", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1981" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034594", "reference_id": "1034594", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034594" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2185911", "reference_id": "2185911", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T21:38:14Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2185911" }, { "reference_url": "https://github.com/lathiat/avahi/issues/375", "reference_id": "375", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T21:38:14Z/" } ], "url": "https://github.com/lathiat/avahi/issues/375" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2023-1981", "reference_id": "CVE-2023-1981", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-15T21:38:14Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2023-1981" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:6707", "reference_id": "RHSA-2023:6707", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:6707" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7190", "reference_id": "RHSA-2023:7190", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7190" }, { "reference_url": "https://usn.ubuntu.com/6129-1/", "reference_id": "USN-6129-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6129-1/" }, { "reference_url": "https://usn.ubuntu.com/6129-2/", "reference_id": "USN-6129-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6129-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582780?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u3?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/586099?format=api", "purl": "pkg:deb/debian/avahi@0.8-10?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-1981" ], "risk_score": 2.8, "exploitability": "0.5", "weighted_severity": "5.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-g2fk-pmey-ekh9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/78463?format=api", "vulnerability_id": "VCID-gmfp-mzuj-d7gz", "summary": "avahi: Reachable assertion in avahi_rdata_parse", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38472.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-38472.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-38472", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01013", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01026", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.0104", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01024", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01019", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01027", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01037", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.0001", "scoring_system": "epss", "scoring_elements": "0.01042", "published_at": "2026-04-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-38472" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38472", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38472" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054879", "reference_id": "1054879", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054879" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2191692", "reference_id": "2191692", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T13:55:06Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2191692" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6", "reference_id": "cpe:/o:redhat:enterprise_linux:6", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7", "reference_id": "cpe:/o:redhat:enterprise_linux:7", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8", "reference_id": "cpe:/o:redhat:enterprise_linux:8", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9", "reference_id": "cpe:/o:redhat:enterprise_linux:9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2023-38472", "reference_id": "CVE-2023-38472", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T13:55:06Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2023-38472" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7836", "reference_id": "RHSA-2023:7836", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7836" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0418", "reference_id": "RHSA-2024:0418", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0418" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0576", "reference_id": "RHSA-2024:0576", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0576" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2433", "reference_id": "RHSA-2024:2433", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2433" }, { "reference_url": "https://usn.ubuntu.com/6487-1/", "reference_id": "USN-6487-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6487-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582780?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u3?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582782?format=api", "purl": "pkg:deb/debian/avahi@0.8-14?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-14%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2023-38472" ], "risk_score": 2.8, "exploitability": "0.5", "weighted_severity": "5.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gmfp-mzuj-d7gz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/88680?format=api", "vulnerability_id": "VCID-gp1s-m1bh-6fc2", "summary": "avahi: assert fail local DoS via D-Bus", "references": [ { "reference_url": "http://avahi.org/changeset/1482", "reference_id": "", "reference_type": "", "scores": [], "url": "http://avahi.org/changeset/1482" }, { "reference_url": "http://avahi.org/milestone/Avahi%200.6.20", "reference_id": "", "reference_type": "", "scores": [], "url": "http://avahi.org/milestone/Avahi%200.6.20" }, { "reference_url": "http://osvdb.org/37507", "reference_id": "", "reference_type": "", "scores": [], "url": "http://osvdb.org/37507" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3372.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3372.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-3372", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27734", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27826", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27876", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27917", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27709", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27777", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27819", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27825", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27783", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27726", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-3372" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3372", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3372" }, { "reference_url": "http://secunia.com/advisories/25811", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/25811" }, { "reference_url": "http://secunia.com/advisories/26083", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/26083" }, { "reference_url": "http://secunia.com/advisories/26791", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/26791" }, { "reference_url": "http://secunia.com/advisories/33220", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/33220" }, { "reference_url": "http://secunia.com/advisories/33279", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/33279" }, { "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35036", "reference_id": "", "reference_type": "", "scores": [], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35036" }, { "reference_url": "http://www.debian.org/security/2008/dsa-1690", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.debian.org/security/2008/dsa-1690" }, { "reference_url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:185", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:185" }, { "reference_url": "http://www.novell.com/linux/security/advisories/2007_14_sr.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.novell.com/linux/security/advisories/2007_14_sr.html" }, { "reference_url": "http://www.securityfocus.com/archive/1/472443/100/0/threaded", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/archive/1/472443/100/0/threaded" }, { "reference_url": "http://www.securityfocus.com/bid/24614", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/24614" }, { "reference_url": "http://www.securitytracker.com/id?1018706", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id?1018706" }, { "reference_url": "http://www.ubuntu.com/usn/usn-696-1", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.ubuntu.com/usn/usn-696-1" }, { "reference_url": "http://www.vupen.com/english/advisories/2007/2317", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.vupen.com/english/advisories/2007/2317" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=245586", "reference_id": "245586", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=245586" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3372", "reference_id": "CVE-2007-3372", "reference_type": "", "scores": [ { "value": "2.1", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:L/Au:N/C:N/I:N/A:P" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3372" }, { "reference_url": "https://usn.ubuntu.com/696-1/", "reference_id": "USN-696-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/696-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/584696?format=api", "purl": "pkg:deb/debian/avahi@0.6.20-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.6.20-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2007-3372" ], "risk_score": 0.9, "exploitability": "0.5", "weighted_severity": "1.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gp1s-m1bh-6fc2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/80482?format=api", "vulnerability_id": "VCID-hjrp-3yew-wqeg", "summary": "avahi: reachable assertion in avahi_s_host_name_resolver_start when trying to resolve badly-formatted hostnames", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3502.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3502.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3502", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09103", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09046", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09166", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09152", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09108", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09161", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09085", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09165", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09196", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09198", "published_at": "2026-04-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3502" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3502", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3502" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1946914", "reference_id": "1946914", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1946914" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986018", "reference_id": "986018", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986018" }, { "reference_url": "https://security.archlinux.org/AVG-2341", "reference_id": "AVG-2341", "reference_type": "", "scores": [ { "value": "Low", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2341" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:6707", "reference_id": "RHSA-2023:6707", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:6707" }, { "reference_url": "https://usn.ubuntu.com/5008-1/", "reference_id": "USN-5008-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5008-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/587003?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/587004?format=api", "purl": "pkg:deb/debian/avahi@0.8-6?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-6%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2021-3502" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hjrp-3yew-wqeg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/44707?format=api", "vulnerability_id": "VCID-hs1w-ky4x-rffx", "summary": "An error in Avahi might lead to a Denial of Service via network and CPU\n consumption.", "references": [ { "reference_url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517683", "reference_id": "", "reference_type": "", "scores": [], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517683" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0758.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0758.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2009-0758", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01122", "scoring_system": "epss", "scoring_elements": "0.78289", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.01122", "scoring_system": "epss", "scoring_elements": "0.782", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.01122", "scoring_system": "epss", "scoring_elements": "0.78209", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.01122", "scoring_system": "epss", "scoring_elements": "0.78239", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.01122", "scoring_system": "epss", "scoring_elements": "0.78222", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.01122", "scoring_system": "epss", "scoring_elements": "0.78248", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.01122", "scoring_system": "epss", "scoring_elements": "0.78254", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.01122", "scoring_system": "epss", "scoring_elements": "0.78279", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.01122", "scoring_system": "epss", "scoring_elements": "0.78262", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.01122", "scoring_system": "epss", "scoring_elements": "0.78258", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2009-0758" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0758", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0758" }, { "reference_url": "http://secunia.com/advisories/38420", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/38420" }, { "reference_url": "http://www.debian.org/security/2010/dsa-2086", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.debian.org/security/2010/dsa-2086" }, { "reference_url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:076", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:076" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2009/03/02/1", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.openwall.com/lists/oss-security/2009/03/02/1" }, { "reference_url": "http://www.securityfocus.com/bid/33946", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/33946" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=488314", "reference_id": "488314", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=488314" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517683", "reference_id": "517683", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517683" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi-daemon:0.6.23:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi-daemon:0.6.23:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi-daemon:0.6.23:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0758", "reference_id": "CVE-2009-0758", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:C" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-0758" }, { "reference_url": "https://security.gentoo.org/glsa/200904-10", "reference_id": "GLSA-200904-10", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200904-10" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2010:0528", "reference_id": "RHSA-2010:0528", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2010:0528" }, { "reference_url": "https://usn.ubuntu.com/992-1/", "reference_id": "USN-992-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/992-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/586131?format=api", "purl": "pkg:deb/debian/avahi@0.6.24-3?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.6.24-3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2009-0758" ], "risk_score": 3.5, "exploitability": "0.5", "weighted_severity": "7.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hs1w-ky4x-rffx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/91549?format=api", "vulnerability_id": "VCID-n9y6-p84p-7ke9", "summary": "Avahi before 0.6.10 allows local users to cause a denial of service (mDNS/DNS-SD service disconnect) via unspecified mDNS name conflicts.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2006-2288", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00074", "scoring_system": "epss", "scoring_elements": "0.22262", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00074", "scoring_system": "epss", "scoring_elements": "0.22428", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00074", "scoring_system": "epss", "scoring_elements": "0.22473", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00074", "scoring_system": "epss", "scoring_elements": "0.2226", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00074", "scoring_system": "epss", "scoring_elements": "0.22343", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00074", "scoring_system": "epss", "scoring_elements": "0.22399", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00074", "scoring_system": "epss", "scoring_elements": "0.22419", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00074", "scoring_system": "epss", "scoring_elements": "0.22378", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00074", "scoring_system": "epss", "scoring_elements": "0.22321", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00074", "scoring_system": "epss", "scoring_elements": "0.22335", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2006-2288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2288", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2288" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/584711?format=api", "purl": "pkg:deb/debian/avahi@0.6.10-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.6.10-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2006-2288" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n9y6-p84p-7ke9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61535?format=api", "vulnerability_id": "VCID-qx9d-jfsn-6fdu", "summary": "Avahi fails to verify the origin of netlink messages, which could allow\n local users to spoof network changes.", "references": [ { "reference_url": "http://avahi.org/milestone/Avahi%200.6.15", "reference_id": "", "reference_type": "", "scores": [], "url": "http://avahi.org/milestone/Avahi%200.6.15" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2006-5461", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23461", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23425", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23587", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23624", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23402", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23473", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23523", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.2354", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23499", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23444", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2006-5461" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5461", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5461" }, { "reference_url": "http://secunia.com/advisories/22807", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/22807" }, { "reference_url": "http://secunia.com/advisories/22852", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/22852" }, { "reference_url": "http://secunia.com/advisories/22932", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/22932" }, { "reference_url": "http://secunia.com/advisories/23020", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/23020" }, { "reference_url": "http://secunia.com/advisories/23042", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/23042" }, { "reference_url": "http://securitytracker.com/id?1017257", "reference_id": "", "reference_type": "", "scores": [], "url": "http://securitytracker.com/id?1017257" }, { "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30207", "reference_id": "", "reference_type": "", "scores": [], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30207" }, { "reference_url": "https://tango.0pointer.de/pipermail/avahi-tickets/2006-November/000320.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://tango.0pointer.de/pipermail/avahi-tickets/2006-November/000320.html" }, { "reference_url": "http://www.gentoo.org/security/en/glsa/glsa-200611-13.xml", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.gentoo.org/security/en/glsa/glsa-200611-13.xml" }, { "reference_url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:215", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:215" }, { "reference_url": "http://www.novell.com/linux/security/advisories/2006_26_sr.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.novell.com/linux/security/advisories/2006_26_sr.html" }, { "reference_url": "http://www.securityfocus.com/bid/21016", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/21016" }, { "reference_url": "http://www.vupen.com/english/advisories/2006/4474", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.vupen.com/english/advisories/2006/4474" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2006-5461", "reference_id": "CVE-2006-5461", "reference_type": "", "scores": [ { "value": "2.1", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:L/Au:N/C:N/I:P/A:N" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-5461" }, { "reference_url": "https://security.gentoo.org/glsa/200611-13", "reference_id": "GLSA-200611-13", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/200611-13" }, { "reference_url": "https://usn.ubuntu.com/380-1/", "reference_id": "USN-380-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/380-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/585252?format=api", "purl": "pkg:deb/debian/avahi@0.6.15-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.6.15-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2006-5461" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qx9d-jfsn-6fdu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/80528?format=api", "vulnerability_id": "VCID-rpzc-ryw1-p7e5", "summary": "avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3468.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3468.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3468", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08621", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08569", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08719", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08682", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08647", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08697", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08617", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08695", "published_at": "2026-04-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3468" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3468", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3468" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1939614", "reference_id": "1939614", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1939614" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=984938", "reference_id": "984938", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=984938" }, { "reference_url": "https://security.archlinux.org/AVG-1742", "reference_id": "AVG-1742", "reference_type": "", "scores": [ { "value": "Low", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1742" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:6707", "reference_id": "RHSA-2023:6707", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:6707" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7836", "reference_id": "RHSA-2023:7836", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7836" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0418", "reference_id": "RHSA-2024:0418", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0418" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0576", "reference_id": "RHSA-2024:0576", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0576" }, { "reference_url": "https://usn.ubuntu.com/5008-1/", "reference_id": "USN-5008-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5008-1/" }, { "reference_url": "https://usn.ubuntu.com/5008-2/", "reference_id": "USN-5008-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5008-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/587002?format=api", "purl": "pkg:deb/debian/avahi@0.8-7?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-7%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2021-3468" ], "risk_score": 2.8, "exploitability": "0.5", "weighted_severity": "5.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rpzc-ryw1-p7e5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/91550?format=api", "vulnerability_id": "VCID-vdut-d3k2-c7ex", "summary": "Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2006-2289", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00119", "scoring_system": "epss", "scoring_elements": "0.30767", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00119", "scoring_system": "epss", "scoring_elements": "0.30893", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00119", "scoring_system": "epss", "scoring_elements": "0.30941", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00119", "scoring_system": "epss", "scoring_elements": "0.30761", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00119", "scoring_system": "epss", "scoring_elements": "0.3082", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00119", "scoring_system": "epss", "scoring_elements": "0.30851", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00119", "scoring_system": "epss", "scoring_elements": "0.30852", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00119", "scoring_system": "epss", "scoring_elements": "0.30808", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00119", "scoring_system": "epss", "scoring_elements": "0.30763", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00119", "scoring_system": "epss", "scoring_elements": "0.3079", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2006-2289" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2289" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/584711?format=api", "purl": "pkg:deb/debian/avahi@0.6.10-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.6.10-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2006-2289" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vdut-d3k2-c7ex" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/91630?format=api", "vulnerability_id": "VCID-y1n3-w6v9-m3cd", "summary": "The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service (infinite loop) via a crafted compressed DNS response with a label that points to itself.", "references": [ { "reference_url": "http://fedoranews.org/cms/node/2362", "reference_id": "", "reference_type": "", "scores": [], "url": "http://fedoranews.org/cms/node/2362" }, { "reference_url": "http://fedoranews.org/cms/node/2408", "reference_id": "", "reference_type": "", "scores": [], "url": "http://fedoranews.org/cms/node/2408" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2006-6870", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.05935", "scoring_system": "epss", "scoring_elements": "0.90647", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.05935", "scoring_system": "epss", "scoring_elements": "0.90584", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.05935", "scoring_system": "epss", "scoring_elements": "0.90589", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.05935", "scoring_system": "epss", "scoring_elements": "0.90599", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.05935", "scoring_system": "epss", "scoring_elements": "0.90607", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.05935", "scoring_system": "epss", "scoring_elements": "0.90618", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.05935", "scoring_system": "epss", "scoring_elements": "0.90624", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.05935", "scoring_system": "epss", "scoring_elements": "0.90634", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.05935", "scoring_system": "epss", "scoring_elements": "0.90628", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2006-6870" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6870", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6870" }, { "reference_url": "http://secunia.com/advisories/23628", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/23628" }, { "reference_url": "http://secunia.com/advisories/23644", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/23644" }, { "reference_url": "http://secunia.com/advisories/23660", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/23660" }, { "reference_url": "http://secunia.com/advisories/23673", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/23673" }, { "reference_url": "http://secunia.com/advisories/23782", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/23782" }, { "reference_url": "http://secunia.com/advisories/24995", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/24995" }, { "reference_url": "http://www.avahi.org/changeset/1340", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.avahi.org/changeset/1340" }, { "reference_url": "http://www.avahi.org/#December2006", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.avahi.org/#December2006" }, { "reference_url": "http://www.avahi.org/ticket/84", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.avahi.org/ticket/84" }, { "reference_url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:003", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:003" }, { "reference_url": "http://www.novell.com/linux/security/advisories/2007_007_suse.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.novell.com/linux/security/advisories/2007_007_suse.html" }, { "reference_url": "http://www.securityfocus.com/bid/21881", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/21881" }, { "reference_url": "http://www.ubuntu.com/usn/usn-402-1", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.ubuntu.com/usn/usn-402-1" }, { "reference_url": "http://www.vupen.com/english/advisories/2007/0071", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.vupen.com/english/advisories/2007/0071" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.10:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.10:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.10:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.11:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.11:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.11:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.12:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.12:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.12:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.13:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.13:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.13:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.14:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.14:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.14:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.15:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.15:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.15:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.8:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.8:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.8:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.9:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:avahi:avahi:0.6.9:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:avahi:avahi:0.6.9:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6870", "reference_id": "CVE-2006-6870", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6870" }, { "reference_url": "https://usn.ubuntu.com/402-1/", "reference_id": "USN-402-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/402-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/583805?format=api", "purl": "pkg:deb/debian/avahi@0.6.16-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.6.16-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582779?format=api", "purl": "pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582781?format=api", "purl": "pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582783?format=api", "purl": "pkg:deb/debian/avahi@0.8-16?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1gkw-3zt3-sbb9" }, { "vulnerability": "VCID-1qch-uvj9-nucr" }, { "vulnerability": "VCID-c1wj-a2qm-wbhr" }, { "vulnerability": "VCID-nbtb-77zf-kkh8" }, { "vulnerability": "VCID-unwy-8b3g-hbbx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582784?format=api", "purl": "pkg:deb/debian/avahi@0.8-18?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie" } ], "aliases": [ "CVE-2006-6870" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-y1n3-w6v9-m3cd" } ], "risk_score": "3.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie" }