Approved changes feed: RSS · Atom

cpe:2.3:a:avahi:avahi:0.9:rc3:*:*:*:*:*:*

part: a version: 0.9 update: rc3

VendorAvahi (5cd1906b-0e44-5d10-b3fd-17ddcbab466a)
ProductAvahi (1ff0f7ae-d383-5987-aaf4-54e7463edaa5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/avahi purl2cpe 2026-06-01 10:16:59.654089
pkg:deb/ubuntu/avahi purl2cpe 2026-06-01 10:16:59.654090
pkg:github/lathiat/avahi purl2cpe 2026-06-01 10:16:59.654091
pkg:gitlab/redhat/avahi purl2cpe 2026-06-01 10:16:59.654093
pkg:rpm/centos/avahi purl2cpe 2026-06-01 10:16:59.654094
pkg:rpm/fedora/avahi purl2cpe 2026-06-01 10:16:59.654095
pkg:rpm/opensuse/avahi purl2cpe 2026-06-01 10:16:59.654097

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-34933 vulnerable 2026-06-08 07:59:13.348251 Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon
MEDIUM (5.5)
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.
Published: 2026-04-03T22:43:26.683Z
Updated: 2026-04-11T18:09:34.774Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.