CVE-2025-68276

Name of the Vulnerable Software and Affected Versions Avahi versions prior to 0.9-rc2

Description Avahi, a system for service discovery on a local network using the mDNS/DNS-SD protocol suite, is susceptible to a denial-of-service condition. An unprivileged local user can cause the avahi-daemon to crash by creating record browsers with the AVAHI LOOKUP USE WIDE AREA flag set through D-Bus. This can be achieved either by directly calling the RecordBrowserNew method or by creating hostname/address/service resolvers/browsers that internally create these browsers.

Recommendations Update to a version later than 0.9-rc2.