wid-sec-w-2026-0975
·
Published 2026-04-06
·
View on BSI CERT-Bund ↗
avahi: Vulnerability allows Denial of Service
CVSS 5.5
MEDIUM
Risk Summary
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.
CVEs (1)
Affected Vendors
Open Source
Affected Products (2)
Open Source
·
avahi
<0.9-rc4
Open Source
·
avahi
0.9-rc4
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more