← Back

Avahi

avahi

Vendor: Avahi • 24 CVEs

CVEs (24)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Avahi
1Avahi
Apr 23, 2026
Dec 31, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service (infinite loop) via a crafted compressed DNS response with a label that points to itself.
1Avahi
1Avahi
Apr 23, 2026
Nov 14, 2006
N/A· v4
N/A· v3
2.1 LOW· v2
Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.
1Avahi
1Avahi
Apr 16, 2026
May 10, 2006
N/A· v4
N/A· v3
2.1 LOW· v2
Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors.
1Avahi
1Avahi
Apr 16, 2026
May 10, 2006
N/A· v4
N/A· v3
3.6 LOW· v2
Avahi before 0.6.10 allows local users to cause a denial of service (mDNS/DNS-SD service disconnect) via unspecified mDNS name conflicts.