Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2024-52616 | 5.3 medium | 1.0% | no CPE yet | A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs. | 15 h ago |
| CVE-2024-52615 | 5.3 medium | 1.0% | no CPE yet | A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected. | 15 h ago |
| CVE-2026-24401 | 6.5 medium | 0.00% | avahi | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., "h.local" as a CNAME for "h.local"). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524, which is part of version 0.9-rc3. | Fri 23 Oct |
| CVE-2023-38473 | 5.5 medium | 0.00% | avahi, redhat, enterprise_linux | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function. | 15 h ago |
| CVE-2023-38472 | 5.5 medium | 0.00% | avahi, redhat, enterprise_linux | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function. | 15 h ago |
| CVE-2023-38471 | 5.5 medium | 0.00% | avahi, redhat, enterprise_linux | A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function. | 15 h ago |
| CVE-2023-38470 | 5.5 medium | 0.00% | avahi, redhat, enterprise_linux | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function. | 15 h ago |
| CVE-2023-38469 | 5.5 medium | 0.00% | avahi, redhat, enterprise_linux | A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. | 15 h ago |
| CVE-2025-59529 | 5.5 medium | 0.00% | avahi | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc5, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although `CLIENTS_MAX` is defined, `server_work()` unconditionally `accept()`s and `client_new()` always appends the new client and increments `n_clients`. There is no check against the limit. When client cannot be accepted as a result of maximal socket number of avahi-daemon, it logs unconditionally error per each connection. Unprivileged local users can exhaust daemon memory and file descriptors, causing a denial of service system-wide for mDNS/DNS-SD. Exhausting local file descriptors causes increased system load caused by logging errors of each of request. Overloading prevents glibc calls using nss-mdns plugins to resolve `*.local.` names and link-local addresses. As of time of publication, no known patched versions are available, but a candidate fix is available in pull request 808, and some workarounds are available. Simple clients are offered for nss-mdns package functionality. It is not possible to disable the unix socket `/run/avahi-daemon/socket`, but resolution requests received via DBus are not affected directly. Tools avahi-resolve, avahi-resolve-address and avahi-resolve-host-name are not affected, they use DBus interface. It is possible to change permissions of unix socket after avahi-daemon is started. But avahi-daemon does not provide any configuration for it. Additional access restrictions like SELinux can also prevent unwanted tools to access the socket and keep resolution working for trusted users. | Fri 23 Oct |
| CVE-2025-12602 | 2.3 low | 0.00% | azure-access, blu-ic2_firmware, blu-ic4_firmware | /etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | 18 Oct |
10 of 10
Download these 10 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.