avahi Schwachstellen (CVE)

Für avahi veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

13 Ergebnisse
6.5Mittel
CVE-2025-68471

Avahi has a reachable assertion in lookup_start

avahi avahi

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.

6.5Mittel
CVE-2025-68468

Avahi has a reachable assertion in lookup_multicast_callback

avahi avahi

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource rec…

5.5Mittel
CVE-2025-68276

Avahi has a reachable assertion in avahi_wide_area_scan_cache

avahi avahi

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP…

5.3Mittel
CVE-2024-52616

Avahi: avahi wide-area dns predictable transaction ids

avahi avahi; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

5.3Mittel
CVE-2024-52615

Avahi: avahi wide-area dns uses constant source port

avahi avahi; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 7

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

6.2Mittel
CVE-2023-38473

Reachable assertion in avahi_alternative_host_name

avahi avahi; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.

6.2Mittel
CVE-2023-38472

Reachable assertion in avahi_rdata_parse

avahi avahi; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.

6.2Mittel
CVE-2023-38471

Reachable assertion in dbus_set_host_name

avahi avahi; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.

6.2Mittel
CVE-2023-38470

Reachable assertion in avahi_escape_label

avahi avahi; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.