GCVE - cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:avahi:avahi:0.6.7:*:*:*:*:*:*:*

part: a version: 0.6.7 update: *

Vendor	Avahi (`5cd1906b-0e44-5d10-b3fd-17ddcbab466a`)
Product	Avahi (`1ff0f7ae-d383-5987-aaf4-54e7463edaa5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/avahi`	purl2cpe	2026-06-01 10:16:59.653994
`pkg:deb/ubuntu/avahi`	purl2cpe	2026-06-01 10:16:59.653995
`pkg:github/lathiat/avahi`	purl2cpe	2026-06-01 10:16:59.653996
`pkg:gitlab/redhat/avahi`	purl2cpe	2026-06-01 10:16:59.653998
`pkg:rpm/centos/avahi`	purl2cpe	2026-06-01 10:16:59.653999
`pkg:rpm/fedora/avahi`	purl2cpe	2026-06-01 10:16:59.654000
`pkg:rpm/opensuse/avahi`	purl2cpe	2026-06-01 10:16:59.654002

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1002`	vulnerable	2026-06-08 04:56:40.661845	Details available avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244. Published: 2011-02-22T18:00:00.000Z Updated: 2024-08-06T22:14:26.817Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2011-0779.html https://exchange.xforce.ibmcloud.com/vulnerabilities/65525 http://www.openwall.com/lists/oss-security/2011/02/22/9 http://www.redhat.com/support/errata/RHSA-2011-0436.html http://www.vupen.com/english/advisories/2011/0511	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5081`	vulnerable	2026-06-08 04:50:49.445523	Details available The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure. Published: 2008-12-17T02:00:00.000Z Updated: 2024-08-07T10:40:17.167Z Open on db.gcve.eu Reference links http://secunia.com/advisories/33220 http://www.openwall.com/lists/oss-security/2008/12/14/1 http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html http://secunia.com/advisories/33279 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9987	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6870`	vulnerable	2026-06-08 04:49:29.880435	Details available The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service (infinite loop) via a crafted compressed DNS response with a label that points to itself. Published: 2007-01-05T00:00:00.000Z Updated: 2024-08-07T20:42:07.511Z Open on db.gcve.eu Reference links http://secunia.com/advisories/23673 http://www.mandriva.com/security/advisories?name=MDKSA-2007:003 http://www.avahi.org/#December2006 http://www.vupen.com/english/advisories/2007/0071 http://secunia.com/advisories/23644	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2289`	vulnerable	2026-06-08 04:49:06.238856	Details available Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors. Published: 2006-05-09T23:00:00.000Z Updated: 2024-08-07T17:43:29.085Z Open on db.gcve.eu Reference links http://0pointer.de/cgi-bin/viewcvs.cgi/%2Acheckout%2A/trunk/docs/NEWS?root=avahi http://secunia.com/advisories/20022 http://www.securityfocus.com/bid/17884 https://exchange.xforce.ibmcloud.com/vulnerabilities/26331 http://www.novell.com/linux/security/advisories/2006_05_19.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2288`	vulnerable	2026-06-08 04:49:06.237396	Details available Avahi before 0.6.10 allows local users to cause a denial of service (mDNS/DNS-SD service disconnect) via unspecified mDNS name conflicts. Published: 2006-05-09T23:00:00.000Z Updated: 2024-08-07T17:43:29.034Z Open on db.gcve.eu Reference links http://0pointer.de/cgi-bin/viewcvs.cgi/%2Acheckout%2A/trunk/docs/NEWS?root=avahi http://secunia.com/advisories/20022 http://www.securityfocus.com/bid/17884 http://www.novell.com/linux/security/advisories/2006_05_19.html http://secunia.com/advisories/20215	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.