Aavahi

Products

Exploited and recent CVEs

• CVE-2026-34933 Medium 5.5 Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon 0.2%
• CVE-2026-24401 Medium 6.5 Avahi has Uncontrolled Recursion in lookup_handle_cname function 0.4%
• CVE-2025-68471 Medium 6.5 Avahi has a reachable assertion in lookup_start 0.4%
• CVE-2025-68468 Medium 6.5 Avahi has a reachable assertion in lookup_multicast_callback 0.4%
• CVE-2025-68276 Medium 5.5 Avahi has a reachable assertion in avahi_wide_area_scan_cache 0.2%
• CVE-2025-59529 Medium 5.5 Avahi: simple protocol server ignores accepts unlimited connections and logs failures without limit 0.2%
• CVE-2024-52616 Medium 5.3 Avahi: avahi wide-area dns predictable transaction ids 0.7%
• CVE-2024-52615 Medium 5.3 Avahi: avahi wide-area dns uses constant source port 0.6%
• CVE-2023-38473 Medium 6.2 Reachable assertion in avahi_alternative_host_name 0.3%
• CVE-2023-38472 Medium 6.2 Reachable assertion in avahi_rdata_parse 0.3%
• CVE-2023-38471 Medium 6.2 Reachable assertion in dbus_set_host_name 0.3%
• CVE-2023-38470 Medium 6.2 Reachable assertion in avahi_escape_label 0.3%
• CVE-2023-38469 Medium 6.2 Reachable assertion in avahi_dns_packet_append_record 0.3%