https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T08:35:02.851067+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-03598 bdu:2026-03598 2026-10-05T08:35:03.024730+00:00 bdu:2026-03598 https://cve.radiocsirt.org/vuln/bell-cve-2025-68468 BELL-CVE-2025-68468 2026-10-05T08:35:03.024771+00:00

Affected: Alpaquita:stream: avahi

 https://cve.radiocsirt.org/vuln/euvd-2026-265439 EUVD-2026-265439 2026-10-05T08:35:03.024798+00:00 EUVD-2026-265439 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68468 fkie_cve-2025-68468 2026-10-05T08:35:03.024810+00:00

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs. As soon as they expire avahi-daemon crashes.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-68468 msrc_CVE-2025-68468 — Avahi has a reachable assertion in lookup_multicast_callback 2026-10-05T08:35:03.024835+00:00 msrc_CVE-2025-68468 https://cve.radiocsirt.org/vuln/oesa-2026-1236 OESA-2026-1236 — avahi security update 2026-10-05T08:35:03.024852+00:00

Affected: openEuler:20.03-LTS-SP4: avahi, openEuler:22.03-LTS-SP4: avahi, openEuler:24.03-LTS: avahi, openEuler:24.03-LTS-SP1: avahi, openEuler:24.03-LTS-SP2: avahi, openEuler:24.03-LTS-SP3: avahi

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. Security Fix(es):

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus. This can be done by either calling the RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.(CVE-2025-68276)

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs. As soon as they expire avahi-daemon crashes.(CVE-2025-68468)

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.(CVE-2025-68471)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10052-1 openSUSE-SU-2026:10052-1 — avahi-0.8-41.1 on GA media 2026-10-05T08:35:03.024892+00:00

avahi-0.8-41.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:11316 RHSA-2026:11316 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-05T08:35:03.024911+00:00

avahi: Avahi: Denial of Service via D-Bus record browsers with AVAHI_LOOKUP_USE_WIDE_AREA flag avahi: Avahi: Denial of Service via crafted mDNS/DNS-SD announcements avahi: Avahi: Denial of Service via unsolicited CNAME announcements avahi: Avahi: Denial of Service via recursive CNAME record in mDNS response avahi: avahi-daemon: Avahi: Denial of Service via D-Bus method call

 https://cve.radiocsirt.org/vuln/suse-su-2026:0143-1 SUSE-SU-2026:0143-1 — Security update for avahi 2026-10-05T08:35:03.024933+00:00

Security update for avahi

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-68468 UBUNTU-CVE-2025-68468 2026-10-05T08:35:03.024948+00:00

Affected: Ubuntu:Pro:14.04:LTS: avahi, Ubuntu:Pro:16.04:LTS: avahi, Ubuntu:Pro:18.04:LTS: avahi, Ubuntu:Pro:20.04:LTS: avahi, Ubuntu:22.04:LTS: avahi, Ubuntu:24.04:LTS: avahi, Ubuntu:25.10: avahi

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs. As soon as they expire avahi-daemon crashes.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0066 WID-SEC-W-2026-0066 — avahi-daemon: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-05T08:35:03.024976+00:00

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in avahi ausnutzen, um einen Denial of Service Angriff durchzuführen.