rpm package
suse/avahi-glib2&distro=SUSE Linux Enterprise Server 16.0
pkg:rpm/suse/avahi-glib2&distro=SUSE%20Linux%20Enterprise%20Server%2016.0
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-68471 | — | < 0.8-160000.4.1 | 0.8-160000.4.1 | Jan 12, 2026 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart. | ||
| CVE-2025-68468 | — | < 0.8-160000.4.1 | 0.8-160000.4.1 | Jan 12, 2026 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs. | ||
| CVE-2025-68276 | — | < 0.8-160000.4.1 | 0.8-160000.4.1 | Jan 12, 2026 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag s | ||
| CVE-2024-52615 | Med | 5.3 | < 0.8-160000.3.1 | 0.8-160000.3.1 | Nov 21, 2024 | A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected. |
- CVE-2025-68471Jan 12, 2026affected < 0.8-160000.4.1fixed 0.8-160000.4.1
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.
- CVE-2025-68468Jan 12, 2026affected < 0.8-160000.4.1fixed 0.8-160000.4.1
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs.
- CVE-2025-68276Jan 12, 2026affected < 0.8-160000.4.1fixed 0.8-160000.4.1
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag s
- affected < 0.8-160000.3.1fixed 0.8-160000.3.1
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.