Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-1gkw-3zt3-sbb9
Summaryavahi: Avahi: Denial of Service via recursive CNAME record in mDNS response
Aliases
0
alias CVE-2026-24401
Fixed_packages
0
url pkg:apk/alpine/avahi@0.8-r25?arch=armhf&distroversion=edge&reponame=main
purl pkg:apk/alpine/avahi@0.8-r25?arch=armhf&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/avahi@0.8-r25%3Farch=armhf&distroversion=edge&reponame=main
1
url pkg:apk/alpine/avahi@0.8-r25?arch=armv7&distroversion=edge&reponame=main
purl pkg:apk/alpine/avahi@0.8-r25?arch=armv7&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/avahi@0.8-r25%3Farch=armv7&distroversion=edge&reponame=main
2
url pkg:apk/alpine/avahi@0.8-r25?arch=loongarch64&distroversion=edge&reponame=main
purl pkg:apk/alpine/avahi@0.8-r25?arch=loongarch64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/avahi@0.8-r25%3Farch=loongarch64&distroversion=edge&reponame=main
3
url pkg:apk/alpine/avahi@0.8-r25?arch=ppc64le&distroversion=edge&reponame=main
purl pkg:apk/alpine/avahi@0.8-r25?arch=ppc64le&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/avahi@0.8-r25%3Farch=ppc64le&distroversion=edge&reponame=main
4
url pkg:apk/alpine/avahi@0.8-r25?arch=x86&distroversion=edge&reponame=main
purl pkg:apk/alpine/avahi@0.8-r25?arch=x86&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/avahi@0.8-r25%3Farch=x86&distroversion=edge&reponame=main
5
url pkg:apk/alpine/avahi@0.8-r25?arch=aarch64&distroversion=edge&reponame=main
purl pkg:apk/alpine/avahi@0.8-r25?arch=aarch64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/avahi@0.8-r25%3Farch=aarch64&distroversion=edge&reponame=main
6
url pkg:apk/alpine/avahi@0.8-r25?arch=s390x&distroversion=edge&reponame=main
purl pkg:apk/alpine/avahi@0.8-r25?arch=s390x&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/avahi@0.8-r25%3Farch=s390x&distroversion=edge&reponame=main
7
url pkg:apk/alpine/avahi@0.8-r25?arch=x86_64&distroversion=edge&reponame=main
purl pkg:apk/alpine/avahi@0.8-r25?arch=x86_64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/avahi@0.8-r25%3Farch=x86_64&distroversion=edge&reponame=main
8
url pkg:apk/alpine/avahi@0.8-r25?arch=riscv64&distroversion=edge&reponame=main
purl pkg:apk/alpine/avahi@0.8-r25?arch=riscv64&distroversion=edge&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/avahi@0.8-r25%3Farch=riscv64&distroversion=edge&reponame=main
9
url pkg:deb/debian/avahi@0.8-18
purl pkg:deb/debian/avahi@0.8-18
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18
10
url pkg:deb/debian/avahi@0.8-18?distro=trixie
purl pkg:deb/debian/avahi@0.8-18?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-18%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/avahi@0.8-5%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1gkw-3zt3-sbb9
1
vulnerability VCID-1qch-uvj9-nucr
2
vulnerability VCID-c1wj-a2qm-wbhr
3
vulnerability VCID-nbtb-77zf-kkh8
4
vulnerability VCID-unwy-8b3g-hbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2%3Fdistro=trixie
1
url pkg:deb/debian/avahi@0.8-5%2Bdeb11u2
purl pkg:deb/debian/avahi@0.8-5%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1gkw-3zt3-sbb9
1
vulnerability VCID-1qch-uvj9-nucr
2
vulnerability VCID-4xxj-5827-gqck
3
vulnerability VCID-82ze-32xz-pqgn
4
vulnerability VCID-9mjb-81e1-qbau
5
vulnerability VCID-9w4x-33np-2fg4
6
vulnerability VCID-c1wj-a2qm-wbhr
7
vulnerability VCID-g2fk-pmey-ekh9
8
vulnerability VCID-gmfp-mzuj-d7gz
9
vulnerability VCID-nbtb-77zf-kkh8
10
vulnerability VCID-unwy-8b3g-hbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-5%252Bdeb11u2
2
url pkg:deb/debian/avahi@0.8-10%2Bdeb12u1
purl pkg:deb/debian/avahi@0.8-10%2Bdeb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1gkw-3zt3-sbb9
1
vulnerability VCID-1qch-uvj9-nucr
2
vulnerability VCID-c1wj-a2qm-wbhr
3
vulnerability VCID-nbtb-77zf-kkh8
4
vulnerability VCID-unwy-8b3g-hbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1
3
url pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/avahi@0.8-10%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1gkw-3zt3-sbb9
1
vulnerability VCID-1qch-uvj9-nucr
2
vulnerability VCID-c1wj-a2qm-wbhr
3
vulnerability VCID-nbtb-77zf-kkh8
4
vulnerability VCID-unwy-8b3g-hbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-10%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/avahi@0.8-16
purl pkg:deb/debian/avahi@0.8-16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1gkw-3zt3-sbb9
1
vulnerability VCID-1qch-uvj9-nucr
2
vulnerability VCID-c1wj-a2qm-wbhr
3
vulnerability VCID-nbtb-77zf-kkh8
4
vulnerability VCID-unwy-8b3g-hbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16
5
url pkg:deb/debian/avahi@0.8-16?distro=trixie
purl pkg:deb/debian/avahi@0.8-16?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1gkw-3zt3-sbb9
1
vulnerability VCID-1qch-uvj9-nucr
2
vulnerability VCID-c1wj-a2qm-wbhr
3
vulnerability VCID-nbtb-77zf-kkh8
4
vulnerability VCID-unwy-8b3g-hbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/avahi@0.8-16%3Fdistro=trixie
6
url pkg:rpm/redhat/avahi-main@0.9~rc4-0.1?arch=hum1
purl pkg:rpm/redhat/avahi-main@0.9~rc4-0.1?arch=hum1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1gkw-3zt3-sbb9
1
vulnerability VCID-1qch-uvj9-nucr
2
vulnerability VCID-c1wj-a2qm-wbhr
3
vulnerability VCID-nzrg-4qpv-13bd
4
vulnerability VCID-unwy-8b3g-hbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/avahi-main@0.9~rc4-0.1%3Farch=hum1
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-24401.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-24401.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-24401
reference_id
reference_type
scores
0
value 0.00043
scoring_system epss
scoring_elements 0.13259
published_at 2026-05-15T12:55:00Z
1
value 0.00043
scoring_system epss
scoring_elements 0.13246
published_at 2026-05-14T12:55:00Z
2
value 0.00043
scoring_system epss
scoring_elements 0.13144
published_at 2026-05-11T12:55:00Z
3
value 0.00043
scoring_system epss
scoring_elements 0.13116
published_at 2026-04-26T12:55:00Z
4
value 0.00043
scoring_system epss
scoring_elements 0.13014
published_at 2026-04-29T12:55:00Z
5
value 0.00043
scoring_system epss
scoring_elements 0.12918
published_at 2026-05-05T12:55:00Z
6
value 0.00043
scoring_system epss
scoring_elements 0.13072
published_at 2026-05-07T12:55:00Z
7
value 0.00043
scoring_system epss
scoring_elements 0.13152
published_at 2026-05-09T12:55:00Z
8
value 0.00043
scoring_system epss
scoring_elements 0.13172
published_at 2026-05-12T12:55:00Z
9
value 0.00043
scoring_system epss
scoring_elements 0.13326
published_at 2026-04-04T12:55:00Z
10
value 0.00043
scoring_system epss
scoring_elements 0.13124
published_at 2026-04-07T12:55:00Z
11
value 0.00043
scoring_system epss
scoring_elements 0.13205
published_at 2026-04-08T12:55:00Z
12
value 0.00043
scoring_system epss
scoring_elements 0.13256
published_at 2026-04-09T12:55:00Z
13
value 0.00043
scoring_system epss
scoring_elements 0.13225
published_at 2026-04-11T12:55:00Z
14
value 0.00043
scoring_system epss
scoring_elements 0.13188
published_at 2026-04-12T12:55:00Z
15
value 0.00043
scoring_system epss
scoring_elements 0.13137
published_at 2026-04-13T12:55:00Z
16
value 0.00043
scoring_system epss
scoring_elements 0.13039
published_at 2026-04-16T12:55:00Z
17
value 0.00043
scoring_system epss
scoring_elements 0.13042
published_at 2026-04-18T12:55:00Z
18
value 0.00043
scoring_system epss
scoring_elements 0.13138
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-24401
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24401
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24401
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1126342
reference_id 1126342
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1126342
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2432534
reference_id 2432534
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2432534
6
reference_url https://github.com/avahi/avahi/issues/501
reference_id 501
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-26T16:14:24Z/
url https://github.com/avahi/avahi/issues/501
7
reference_url https://github.com/avahi/avahi/commit/78eab31128479f06e30beb8c1cbf99dd921e2524
reference_id 78eab31128479f06e30beb8c1cbf99dd921e2524
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-26T16:14:24Z/
url https://github.com/avahi/avahi/commit/78eab31128479f06e30beb8c1cbf99dd921e2524
8
reference_url https://github.com/avahi/avahi/security/advisories/GHSA-h4vp-5m8j-f6w3
reference_id GHSA-h4vp-5m8j-f6w3
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-26T16:14:24Z/
url https://github.com/avahi/avahi/security/advisories/GHSA-h4vp-5m8j-f6w3
9
reference_url https://access.redhat.com/errata/RHSA-2026:11316
reference_id RHSA-2026:11316
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:11316
10
reference_url https://usn.ubuntu.com/8269-1/
reference_id USN-8269-1
reference_type
scores
url https://usn.ubuntu.com/8269-1/
Weaknesses
0
cwe_id 674
name Uncontrolled Recursion
description The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Exploits
Severity_range_score6.5 - 6.5
Exploitability0.5
Weighted_severity5.9
Risk_score3.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-1gkw-3zt3-sbb9