UBUNTU-CVE-2026-47180

Zeroconf is a pure Python implementation of multicast DNS service disc...

UBUNTU-CVE-2026-47183

Zeroconf is a pure Python implementation of multicast DNS service disc...

UBUNTU-CVE-2026-48487

Zeroconf is a pure Python implementation of multicast DNS service disc...

DEBIAN-CVE-2026-48045

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query, each up to MAXMSGABSOLUTE = 8966 bytes, in self.deferredaddr and armed a per-address timer in self.timersaddr without...

CVE-2026-47180

CVE-2026-47180 affects the Zeroconf Python library. The vulnerability stems from DNSIncoming._decode_labels_at_offset recursing for each DNS-name compression pointer; a crafted mDNS packet with ~1500 chained pointers can cause unbounded recursion, escaping DNSIncoming.init and triggering sustaine...