VYPR
Get started
← All advisories
Medium severity5.5NVD Advisory· Published Apr 3, 2026· Updated Apr 13, 2026

CVE-2026-34933

CVE-2026-34933

Description

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.

Affected products

4
  • Avahi/Avahi4 versions
    cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*range: <0.9
    • cpe:2.3:a:avahi:avahi:0.9:rc1:*:*:*:*:*:*
    • cpe:2.3:a:avahi:avahi:0.9:rc2:*:*:*:*:*:*
    • cpe:2.3:a:avahi:avahi:0.9:rc3:*:*:*:*:*:*

Patches

1
625ca0fac192
https://github.com/avahi/avahivia nvd-ref
commit

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

4

News mentions

0

No linked articles in our index yet.