https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:57:35.428335+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:6707 ALSA-2023:6707 — Moderate: avahi security update 2026-10-03T00:57:35.569071+00:00

Affected: AlmaLinux:9: avahi, AlmaLinux:9: avahi-compat-howl, AlmaLinux:9: avahi-compat-howl-devel, AlmaLinux:9: avahi-compat-libdns_sd, AlmaLinux:9: avahi-compat-libdns_sd-devel, AlmaLinux:9: avahi-devel, AlmaLinux:9: avahi-glib, AlmaLinux:9: avahi-glib-devel, AlmaLinux:9: avahi-libs, AlmaLinux:9: avahi-tools

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468) * avahi: reachable assertion in avahi_s_host_name_resolver_start when trying to resolve badly-formatted hostnames (CVE-2021-3502) * avahi: avahi-daemon can be crashed via DBus (CVE-2023-1981)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-04611 bdu:2021-04611 2026-10-03T00:57:35.569148+00:00 bdu:2021-04611 https://cve.radiocsirt.org/vuln/bell-cve-2021-3502 Withdrawn: BELL-CVE-2021-3502 — CVE-2021-3502 does not affect BellSoft software 2026-10-03T00:57:35.569167+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T00:57:35.569183+00:00 certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/euvd-2026-20899 EUVD-2026-20899 2026-10-03T00:57:35.569196+00:00 EUVD-2026-20899 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3502 fkie_cve-2021-3502 2026-10-03T00:57:35.569206+00:00

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.

 https://cve.radiocsirt.org/vuln/ghsa-mw7q-3wxj-rqfx GHSA-mw7q-3wxj-rqfx 2026-10-03T00:57:35.569227+00:00

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.

 https://cve.radiocsirt.org/vuln/gsd-2021-3502 gsd-2021-3502 2026-10-03T00:57:35.569242+00:00 gsd-2021-3502 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3502 msrc_CVE-2021-3502 — A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing… 2026-10-03T00:57:35.569252+00:00 msrc_CVE-2021-3502 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10643-1 openSUSE-SU-2024:10643-1 — avahi-0.8-7.2 on GA media 2026-10-03T00:57:35.569268+00:00

avahi-0.8-7.2 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3502 UBUNTU-CVE-2021-3502 2026-10-03T00:57:35.569288+00:00

Affected: Ubuntu:22.04:LTS: avahi

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.