CVE-2026-34933

medium

Description

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.

References

https://github.com/avahi/avahi/security/advisories/GHSA-w65r-6gxh-vhvc

https://github.com/avahi/avahi/pull/891

https://github.com/avahi/avahi/commit/625ca0fac19229f6dfa3a6c6b698ae657187e50c

Details

Source: Mitre, NVD

Published: 2026-04-03

Updated: 2026-04-06

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00012