Lucene search
K

21 matches found

OSV
OSV
added 2026/04/03 11:17 p.m.2 views

UBUNTU-CVE-2026-34933

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version...

5.5CVSS5.7AI score0.00203EPSS
Exploits1References5
Redos
Redos
added 2026/02/16 12:0 a.m.3 views

ROS-20260216-73-0047

A vulnerability in the clientwork function of the Avahi LAN service discovery system is related to the execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS5.8AI score0.0045EPSS
Exploits0
Redos
Redos
added 2026/02/16 12:0 a.m.4 views

ROS-20260216-73-0046

A vulnerability in the avahialternativehostname function of the Avahi LAN service discovery system is related to a flaw in the use of the assert function. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

6.2CVSS5.6AI score0.00306EPSS
Exploits0
EUVD
EUVD
added 2026/01/12 5:39 p.m.1 views

EUVD-2025-206278

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart...

6.5CVSS6.1AI score0.00353EPSS
Exploits1References3
AlpineLinux
AlpineLinux
added 2026/01/12 5:39 p.m.5 views

CVE-2025-68471

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart...

6.5CVSS6.7AI score0.00353EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2026/01/12 5:31 p.m.3 views

CVE-2025-68276

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon with wide-area disabled by creating record browsers with the AVAHILOOKUPUSEWIDEAREA flag set via D-Bus. This can ...

5.5CVSS5.2AI score0.0014EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/11/03 2:47 p.m.5 views

CVE-2025-12602

/etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

9.8CVSS7AI score0.00244EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/01 9:30 p.m.5 views

EUVD-2025-37437

/etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

2.3CVSS6.5AI score0.00244EPSS
Exploits0References2
NVD
NVD
added 2025/11/01 7:15 p.m.4 views

CVE-2025-12602

/etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

9.8CVSS0.00244EPSS
Exploits0References1
OSV
OSV
added 2025/11/01 7:15 p.m.3 views

CVE-2025-12602

/etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

9.8CVSS5.8AI score0.00244EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/01 6:54 p.m.5 views

CVE-2025-12602 /etc/avahi/services/z9.service can be Arbitrarily Written

/etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

2.3CVSS0.00244EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/01 6:54 p.m.3 views

CVE-2025-12602 /etc/avahi/services/z9.service can be Arbitrarily Written

/etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

2.3CVSS6.6AI score0.00244EPSS
Exploits0References1
CVE
CVE
added 2025/11/01 6:54 p.m.15 views

CVE-2025-12602

CVE-2025-12602 affects Azure Access Technology BLU-IC2/BLU-IC4 up to version 1.19.5. It allows arbitrary writes to /etc/avahi/services/z9.service (out-of-bounds write). CVSSv3.1: Critical (9.8) with high impact on confidentiality, integrity, and availability. Remediation: update to a newer versio...

9.8CVSS6.6AI score0.00244EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/11/01 12:0 a.m.5 views

Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 安全漏洞

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are vulnerable to an out-of-bounds write vulnerability that stems from the fact that...

9.8CVSS6.9AI score0.00244EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/09/25 12:0 a.m.2 views

Do Not Install the Avahi Service

Avahi is a zero-configuration networking implementation, including a system for multicast DNS/DNS-SD service discovery and automatic broadcast. For example, you can connect a server to the network and use Avahi to automatically broadcast network services running on the server for other user to...

6.7AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/05/27 12:0 a.m.4 views

RHEL 9 : avahi (RHSA-2025:7437)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7437 advisory. Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service...

5.3CVSS6.8AI score0.00681EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2025/05/07 12:0 a.m.3 views

Do Not Enable the Avahi Service

Avahi is a zero-configuration networking implementation, including a system for multicast DNS/DNS-SD service discovery and automatic broadcast. For example, you can connect a server to the network and use Avahi to automatically broadcast network services running on the server for other user to...

6.7AI score
Exploits0References1
OpenVAS
OpenVAS
added 2025/05/07 12:0 a.m.3 views

Do Not Install the Avahi Service

Avahi is a zero-configuration networking implementation, including a system for multicast DNS/DNS-SD service discovery and automatic broadcast. For example, you can connect a server to the network and use Avahi to automatically broadcast network services running on the server for other user to...

6.7AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.2 views

The vulnerability of the avahi_rdata_parse() function in the Avahi service discovery system allows a attacker to cause a service failure.

The vulnerability of the avahirdataparse function in the Avahi service discovery system is related to the insufficient use of this function. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS6.4AI score0.00306EPSS
Exploits0References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.2 views

The vulnerability of the Avahi service detection system in local networks, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Avahi service detection system in local networks is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a perpetrator to cause service failures...

5.5CVSS6.2AI score0.00392EPSS
Exploits1References12Affected Software6
Rows per page
Query Builder