Known vulnerabilities in avahi (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:avahi_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting avahi (Ubuntu package) avahi (Ubuntu package) is affected by 9 known vulnerabilities: 1 high, 6 medium, 2 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127433 - Reachable Assertion
CVE-2025-68471
CWE-617 Medium
No
No
0.6.31-4ubuntu1.3+esm4, 0.6.32~rc+dfsg-1ubuntu2.3+esm4, 0.7-3.1ubuntu1.3+esm3, 0.7-4ubuntu7.3+esm1, 0.8-5ubuntu5.4, 0.8-13ubuntu6.1, 0.8-16ubuntu3.1 24.04.2026 SB2026012625
SB2026042419
SB2026042420
and 5 more
#VU127432 - Reachable Assertion
CVE-2025-68468
CWE-617 Medium
No
No
0.6.31-4ubuntu1.3+esm4, 0.6.32~rc+dfsg-1ubuntu2.3+esm4, 0.7-3.1ubuntu1.3+esm3, 0.7-4ubuntu7.3+esm1, 0.8-5ubuntu5.4, 0.8-13ubuntu6.1, 0.8-16ubuntu3.1 24.04.2026 SB2026012625
SB2026042419
SB2026042420
and 5 more
#VU127431 - Reachable Assertion
CVE-2025-68276
CWE-617 Low
No
No
0.6.31-4ubuntu1.3+esm4, 0.6.32~rc+dfsg-1ubuntu2.3+esm4, 0.7-3.1ubuntu1.3+esm3, 0.7-4ubuntu7.3+esm1, 0.8-5ubuntu5.4, 0.8-13ubuntu6.1, 0.8-16ubuntu3.1 24.04.2026 SB2026012625
SB2026042419
SB2026042420
and 5 more
#VU125663 - Reachable Assertion
CVE-2026-34933
CWE-617 Low
No
No
0.6.31-4ubuntu1.3+esm5, 0.6.32~rc+dfsg-1ubuntu2.3+esm5, 0.7-3.1ubuntu1.3+esm4, 0.7-4ubuntu7.3+esm2, 0.8-5ubuntu5.5, 0.8-13ubuntu6.2, 0.8-16ubuntu3.2, 0.8-18ubuntu1.1 09.04.2026 SB2026040975
SB2026041133
SB20260417120
and 10 more
#VU122025 - Uncontrolled Recursion
CVE-2026-24401
CWE-674 Medium
No
No
0.6.31-4ubuntu1.3+esm5, 0.6.32~rc+dfsg-1ubuntu2.3+esm5, 0.7-3.1ubuntu1.3+esm4, 0.7-4ubuntu7.3+esm2, 0.8-5ubuntu5.5, 0.8-13ubuntu6.2, 0.8-16ubuntu3.2, 0.8-18ubuntu1.1 26.01.2026 SB2026012625
SB2026022818
SB2026022851
and 5 more
#VU32817 - Improper input validation
CVE-2010-2640
CWE-20 Medium
No
No
- 07.01.2011 SB2011010702
SB2012042004
SB2011112002
#VU32818 - Improper input validation
CVE-2010-2641
CWE-20 Medium
No
No
- 07.01.2011 SB2011010703
SB2012042005
SB2011112002
#VU32060 - Heap-based Buffer Overflow
CVE-2010-2642
CWE-122 High
No
No
- 07.01.2011 SB2011010701
SB2012042002
SB2012042003
and 1 more
#VU33874 - Improper input validation
CVE-2010-2643
CWE-20 Medium
No
No
- 07.01.2011 SB2011010704
SB2012042006
SB2011112002