https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T00:15:46.117361+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-68276 CVE-2025-68276 — Avahi has a reachable assertion in avahi_wide_area_scan_cache 2026-10-07T00:15:46.181154+00:00

Affected: avahi

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus. This can be done by either calling the RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.

 https://vulnerability.circl.lu/vuln/usn-7967-1 USN-7967-1 — avahi vulnerabilities 2026-10-07T00:15:46.181263+00:00

Affected: Ubuntu:Pro:14.04:LTS: avahi, Ubuntu:Pro:16.04:LTS: avahi, Ubuntu:Pro:18.04:LTS: avahi, Ubuntu:Pro:20.04:LTS: avahi, Ubuntu:22.04:LTS: avahi, Ubuntu:24.04:LTS: avahi, Ubuntu:25.10: avahi

It was discovered that Avahi incorrectly terminated when processing browser records with wide-area disabled. An attacker could possibly use this issue to cause Avahi to crash, resulting in a denial of service. (CVE-2025-68276)

It was discovered that Avahi incorrectly terminated when processing unsolicited CNAME records pointing to resource records with short TTLs. An attacker could possibly use this issue to cause Avahi to crash, resulting in a denial of service. (CVE-2025-68468)

It was discovered that Avahi incorrectly terminated when processing unsolicited CNAME records in quick succession. An attacker could possibly use this issue to cause Avahi to crash, resulting in a denial of service. (CVE-2025-68471)