SB2026012625 - Multiple vulnerabilities in Avahi

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026012625

SB2026012625 - Multiple vulnerabilities in Avahi

Published: January 26, 2026 Updated: April 24, 2026

Security Bulletin ID SB2026012625
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 5
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 80% Low 20%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 5 vulnerabilities.


1) Uncontrolled Recursion (CVE-ID: CVE-2026-24401)

CWE-ID: CWE-674 - Uncontrolled Recursion

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to uncontrolled recursion in lookup_handle_cname. A remote attacker can cause a denial of service condition on the target system.


2) Reachable assertion (CVE-ID: CVE-2025-68276)

CWE-ID: CWE-617 - Reachable Assertion

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to reachable assertion in avahi_wide_area_scan_cache when creating a record browser with the AVAHI_LOOKUP_USE_WIDE_AREA flag while wide-area is disabled. A local user can create a crafted record browser request to cause a denial of service.

The issue causes avahi-daemon to terminate with SIGABRT.


3) Reachable assertion (CVE-ID: CVE-2025-68468)

CWE-ID: CWE-617 - Reachable Assertion

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to reachable assertion in lookup_multicast_callback when processing unsolicited multicast DNS announcements containing CNAME resource records that point to records with short TTLs. A remote attacker can send a specially crafted announcement to cause a denial of service.

User interaction is required because exploitation depends on a record browser browsing for the targeted service type.


4) Reachable assertion (CVE-ID: CVE-2025-68471)

CWE-ID: CWE-617 - Reachable Assertion

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to reachable assertion in lookup_start when processing unsolicited multicast DNS announcements with CNAME resource records. A remote attacker can send two specially crafted unsolicited announcements to cause a denial of service.

The issue affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, and user interaction is required.


5) Uncontrolled Recursion (CVE-ID: CVE-2024-2699)

CWE-ID: CWE-674 - Uncontrolled Recursion

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to uncontrolled recursion in lookup_handle_cname when processing unsolicited announcements with recursive CNAME resource records. A remote attacker can send a specially crafted multicast DNS announcement to cause a denial of service.

User interaction is required, and the issue affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly.


Remediation

Install update from vendor's website.

References