CVE catalog

CVE-2025-68471

Avahi vulnerabilities

Severity: Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published: Jan 1, 2025, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.40% · Oct 25, 2026

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	avahi	sid	`0.8-18`	fixed
Debian	avahi	forky	`0.8-18`	fixed
Debian	avahi	trixie	`0.8-16`	vulnerable
Debian	avahi	bookworm	`0.8-10+deb12u1`	vulnerable
Ubuntu	avahi	noble	Not reported	vulnerable
Ubuntu	avahi	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	avahi-autoipd	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	avahi-daemon	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	avahi-discover	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	avahi-dnsconfd	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	avahi-ui-utils	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	avahi-utils	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	gir1.2-avahi-0.6	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	libavahi-client-dev	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	libavahi-client3	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	libavahi-common-data	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	libavahi-common-dev	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	libavahi-common3	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	libavahi-compat-libdnssd-dev	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	libavahi-compat-libdnssd1	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	libavahi-core-dev	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	libavahi-core7	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	libavahi-glib-dev	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	libavahi-glib1	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	libavahi-gobject-dev	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	libavahi-gobject0	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	libavahi-ui-gtk3-0	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	libavahi-ui-gtk3-dev	noble	`0.8-13ubuntu6.1`	fixed
Ubuntu	python3-avahi	noble	`0.8-13ubuntu6.1`	fixed
Alpine	avahi	3.24	`0.8-r25`	fixed
Ubuntu	avahi	pro	`0.7-4ubuntu5`	vulnerable
Ubuntu	avahi	pro	`0.7-4ubuntu6`	vulnerable
Ubuntu	avahi	pro	`0.7-4ubuntu7`	vulnerable
Ubuntu	avahi	pro	`0.7-4ubuntu7.1`	vulnerable
Ubuntu	avahi	pro	`0.7-4ubuntu7.2`	vulnerable
Ubuntu	avahi	pro	`0.7-4ubuntu7.3`	vulnerable
Ubuntu	avahi	pro	`0.7-4ubuntu7.3+esm1`	fixed
Ubuntu	avahi	22.04	`0.8-5ubuntu4`	vulnerable
Ubuntu	avahi	22.04	`0.8-5ubuntu5`	vulnerable
Ubuntu	avahi	22.04	`0.8-5ubuntu5.1`	vulnerable
Ubuntu	avahi	22.04	`0.8-5ubuntu5.2`	vulnerable
Ubuntu	avahi	22.04	`0.8-5ubuntu5.3`	vulnerable
Ubuntu	avahi	22.04	`0.8-5ubuntu5.4`	fixed
Ubuntu	avahi	24.04	`0.8-10ubuntu1`	vulnerable
Ubuntu	avahi	24.04	`0.8-13ubuntu1`	vulnerable
Ubuntu	avahi	24.04	`0.8-13ubuntu2`	vulnerable
Ubuntu	avahi	24.04	`0.8-13ubuntu4`	vulnerable
Ubuntu	avahi	24.04	`0.8-13ubuntu5`	vulnerable
Ubuntu	avahi	24.04	`0.8-13ubuntu6`	vulnerable
Ubuntu	avahi	24.04	`0.8-13ubuntu6.1`	fixed
Ubuntu	avahi	25.10	`0.8-16ubuntu2`	vulnerable
Ubuntu	avahi	25.10	`0.8-16ubuntu3`	vulnerable
Ubuntu	avahi	25.10	`0.8-16ubuntu3.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	avahi	source	sid	`0.8-18`	not yet assigned	Not reported	[1125419]
Debian	avahi	source	forky	`0.8-18`	not yet assigned	Not reported	[1125419]
Debian	avahi	source	trixie	`(unfixed)`	not yet assigned	Not reported	[1125419]
Debian	avahi	source	bookworm	`(unfixed)`	not yet assigned	Not reported	[1125419]
Ubuntu	avahi	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	avahi-autoipd	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	avahi-daemon	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	avahi-discover	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	avahi-dnsconfd	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	avahi-ui-utils	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	avahi-utils	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	gir1.2-avahi-0.6	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	libavahi-client-dev	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	libavahi-client3	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	libavahi-common-data	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	libavahi-common-dev	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	libavahi-common3	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	libavahi-compat-libdnssd-dev	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	libavahi-compat-libdnssd1	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	libavahi-core-dev	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	libavahi-core7	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	libavahi-glib-dev	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	libavahi-glib1	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	libavahi-gobject-dev	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	libavahi-gobject0	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	libavahi-ui-gtk3-0	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	libavahi-ui-gtk3-dev	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Ubuntu	python3-avahi	deb	noble	`0.8-13ubuntu6.1`	Not reported	Not reported	Not reported
Alpine	avahi	apk	3.24	`0.8-r25`	Not reported	ALPINE-CVE-2025-68471	Not reported
Ubuntu	avahi	deb	pro	`0.7-4ubuntu7.3+esm1`	Not reported	UBUNTU-CVE-2025-68471	Not reported
Ubuntu	avahi	deb	22.04	`0.8-5ubuntu5.4`	Not reported	UBUNTU-CVE-2025-68471	Not reported
Ubuntu	avahi	deb	24.04	`0.8-13ubuntu6.1`	Not reported	UBUNTU-CVE-2025-68471	Not reported
Ubuntu	avahi	deb	25.10	`0.8-16ubuntu3.1`	Not reported	UBUNTU-CVE-2025-68471	Not reported

[Debian bug #1125419]

Notes

[trixie] avahi: Minor issue [bookworm] avahi: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[avahi-autoipd]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[avahi-daemon]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[avahi-discover]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · all · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · all · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[avahi-dnsconfd]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[avahi-ui-utils]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[avahi-utils]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[gir1.2-avahi-0.6]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[libavahi-client3]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[libavahi-client-dev]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[libavahi-common3]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[libavahi-common-data]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[libavahi-common-dev]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[libavahi-compat-libdnssd1]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[libavahi-compat-libdnssd-dev]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[libavahi-core7]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[libavahi-core-dev]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[libavahi-glib1]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[libavahi-glib-dev]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[libavahi-gobject0]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
[libavahi-gobject-dev]Affected
Source package: [avahi]
Details (2)
- 0.8-10+deb12u1 · amd64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12
- 0.8-10+deb12u1 · arm64 · bookworm
  Affected
  usn · avahi · debian · bookworm; usn · avahi · debian · 12

Next results

Observed: Oct 24, 2026, 7:41:39 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]