Priority MEDIUM 58
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00207 · Published 2026-04-03 · Partial fix · 0.9-rc4 CWE-617
Priority LOW 29
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00373 · Published 2026-01-24 · Partial fix · 0.9-rc3 CWE-674
Priority LOW 29
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00405 · Published 2026-01-12 · Partial fix CWE-617
Priority LOW 29
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0038 · Published 2026-01-12 · Partial fix CWE-617
Priority LOW 24
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00156 · Published 2026-01-12 · Partial fix CWE-617
Priority MEDIUM 58
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00222 · Published 2025-12-18 · Partial fix CWE-400
Priority LOW 31
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00726 · Published 2024-11-21 · Partial fix · 0.9-rc2, 0.8-22.el9_6 CWE-334
Priority LOW 31
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00622 · Published 2024-11-21 · Partial fix · 0.9-rc3, 0.9~rc2-1.el10_0.1 +1 CWE-330
Priority LOW 28
A vulnerability was found in Avahi.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.0032 · Published 2023-11-02 · Partial fix · 0.9-rc1 CWE-617
Priority LOW 28
A vulnerability was found in Avahi.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.0032 · Published 2023-11-02 · Partial fix · 0.9-rc1 CWE-617
Priority LOW 28
A vulnerability was found in Avahi.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00328 · Published 2023-11-02 · Partial fix · 0.9-rc1 CWE-617
Priority LOW 28
A vulnerability was found in Avahi.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.0032 · Published 2023-11-02 · Partial fix · 0.9-rc1 CWE-617
Priority LOW 28
A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.0032 · Published 2023-11-02 · Partial fix · 0.9-rc1 CWE-617
Priority LOW 25
A vulnerability was found in the avahi library.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00386 · Published 2023-05-26 · Partial fix CWE-400
Priority LOW 25
A flaw was found in avahi in versions 0.6 up to 0.8.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00439 · Published 2021-06-02 · Partial fix CWE-835
Priority LOW 25
A flaw was found in avahi 0.8-5.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00374 · Published 2021-05-07 · Fixed CWE-617
Priority LOW 34
avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbitrary empty files via…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00395 · Published 2021-02-17 · No fix listed CWE-59
Priority MEDIUM 51
avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) a…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.03238 · Published 2017-05-01 · Partial fix CWE-346
Priority MEDIUM 46
avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.29361 · Published 2011-02-22 · Fixed CWE-835
Priority LOW 24
The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNS packet with an invalid chec…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02273 · Published 2010-07-07 · Fixed
Priority LOW 38
The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02011 · Published 2009-03-03 · Fixed CWE-399
Priority MEDIUM 57
The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source p…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.59223 · Published 2008-12-17 · Fixed CWE-399
Priority LOW 11
The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service (exit) via empty TXT data over D-Bus, which triggers an assert error.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00404 · Published 2007-06-22 · No fix listed
Priority LOW 27
The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service (infinite loop) via a crafted compressed DNS response with a label that points to itself.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02437 · Published 2007-01-05 · No fix listed
Priority LOW 12
Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00418 · Published 2006-11-14 · No fix listed
Load more
THREATIST.IORead the docs