Search for packages
| purl | pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie |
| Next non-vulnerable version | 0.8-5+deb11u3 |
| Latest non-vulnerable version | 0.8-18 |
| Risk | 3.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1gkw-3zt3-sbb9
Aliases: CVE-2026-24401 |
avahi: Avahi: Denial of Service via recursive CNAME record in mDNS response |
Affected by 0 other vulnerabilities. |
|
VCID-1qch-uvj9-nucr
Aliases: CVE-2025-68471 |
avahi: Avahi: Denial of Service via unsolicited CNAME announcements |
Affected by 0 other vulnerabilities. |
|
VCID-c1wj-a2qm-wbhr
Aliases: CVE-2025-68468 |
avahi: Avahi: Denial of Service via crafted mDNS/DNS-SD announcements |
Affected by 0 other vulnerabilities. |
|
VCID-nbtb-77zf-kkh8
Aliases: CVE-2024-52616 |
avahi: Avahi Wide-Area DNS Predictable Transaction IDs |
Affected by 0 other vulnerabilities. |
|
VCID-unwy-8b3g-hbbx
Aliases: CVE-2025-68276 |
avahi: Avahi: Denial of Service via D-Bus record browsers with AVAHI_LOOKUP_USE_WIDE_AREA flag |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-4xxj-5827-gqck | avahi: Reachable assertion in avahi_alternative_host_name |
CVE-2023-38473
|
| VCID-7afj-kkdv-zbez | avahi: Multicast DNS responds to unicast queries outside of local network |
CVE-2017-6519
|
| VCID-82ze-32xz-pqgn | avahi: Reachable assertion in avahi_dns_packet_append_record |
CVE-2023-38469
|
| VCID-9mjb-81e1-qbau | avahi: Reachable assertion in dbus_set_host_name |
CVE-2023-38471
|
| VCID-9w4x-33np-2fg4 | avahi: Reachable assertion in avahi_escape_label |
CVE-2023-38470
|
| VCID-b6c5-yjhz-x3hh | Multiple vulnerabilities were found in Avahi, allowing for Denial of Service. |
CVE-2011-1002
|
| VCID-daum-72mg-pkhn | Multiple vulnerabilities were found in Avahi, allowing for Denial of Service. |
CVE-2010-2244
|
| VCID-ezsn-vvex-gkah | avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects the packaging for Debian GNU/Linux (used indirectly by SUSE), not the upstream Avahi product. |
CVE-2021-26720
|
| VCID-ffax-863u-skce | A Denial of Service vulnerability has been discovered in Avahi. |
CVE-2008-5081
|
| VCID-g2fk-pmey-ekh9 | avahi: avahi-daemon can be crashed via DBus |
CVE-2023-1981
|
| VCID-gmfp-mzuj-d7gz | avahi: Reachable assertion in avahi_rdata_parse |
CVE-2023-38472
|
| VCID-gp1s-m1bh-6fc2 | avahi: assert fail local DoS via D-Bus |
CVE-2007-3372
|
| VCID-hjrp-3yew-wqeg | avahi: reachable assertion in avahi_s_host_name_resolver_start when trying to resolve badly-formatted hostnames |
CVE-2021-3502
|
| VCID-hs1w-ky4x-rffx | An error in Avahi might lead to a Denial of Service via network and CPU consumption. |
CVE-2009-0758
|
| VCID-n9y6-p84p-7ke9 | Avahi before 0.6.10 allows local users to cause a denial of service (mDNS/DNS-SD service disconnect) via unspecified mDNS name conflicts. |
CVE-2006-2288
|
| VCID-qx9d-jfsn-6fdu | Avahi fails to verify the origin of netlink messages, which could allow local users to spoof network changes. |
CVE-2006-5461
|
| VCID-rpzc-ryw1-p7e5 | avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket |
CVE-2021-3468
|
| VCID-vdut-d3k2-c7ex | Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors. |
CVE-2006-2289
|
| VCID-y1n3-w6v9-m3cd | The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service (infinite loop) via a crafted compressed DNS response with a label that points to itself. |
CVE-2006-6870
|