Approved changes feed: RSS · Atom

cpe:2.3:a:avahi:avahi:0.7:*:*:*:*:*:*:*

part: a version: 0.7 update: *

VendorAvahi (5cd1906b-0e44-5d10-b3fd-17ddcbab466a)
ProductAvahi (1ff0f7ae-d383-5987-aaf4-54e7463edaa5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/avahi purl2cpe 2026-06-01 10:16:59.654022
pkg:deb/ubuntu/avahi purl2cpe 2026-06-01 10:16:59.654023
pkg:github/lathiat/avahi purl2cpe 2026-06-01 10:16:59.654025
pkg:gitlab/redhat/avahi purl2cpe 2026-06-01 10:16:59.654026
pkg:rpm/centos/avahi purl2cpe 2026-06-01 10:16:59.654027
pkg:rpm/fedora/avahi purl2cpe 2026-06-01 10:16:59.654029
pkg:rpm/opensuse/avahi purl2cpe 2026-06-01 10:16:59.654030

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-6519 vulnerable 2026-06-08 05:09:51.477802 Details available
avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.
Published: 2017-05-01T01:00:00.000Z
Updated: 2025-12-03T21:57:30.030Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.