PT-2026-30270 · Avahi+2 · Avahi+2

Certocd · Published 2026-04-03 · Updated 2026-05-12 · CVE-2026-34933

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Avahi versions prior to 0.9-rc4

Description Avahi, a system for local network service discovery using mDNS/DNS-SD, is susceptible to a denial-of-service condition. An unprivileged local user can terminate the avahi-daemon process by sending a crafted D-Bus method call with conflicting publish flags to the transport flags from domain() function.

Recommendations Update to version 0.9-rc4 or later.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2026-34933

ECHO-A71E-9FDF-9B3D

OESA-2026-1854

OESA-2026-1982

OESA-2026-1983

OESA-2026-1984

OESA-2026-1985

OESA-2026-1986

OPENSUSE-SU-2026:10670-1

RHSA-2026:11316

USN-8269-1

Affected Products

Avahi

Linuxmint

Ubuntu

References · 31

• 🔥 https://github.com/avahi/avahi/security/advisories/GHSA-w65r-6gxh-vhvc · Exploit
• 🔥 http://openwall.com/lists/oss-security/2026/04/11/9 · Exploit
• https://github.com/avahi/avahi/commit/625ca0fac19229f6dfa3a6c6b698ae657187e50c · Patch
• https://github.com/avahi/avahi/pull/891 · Patch
• https://ubuntu.com/security/CVE-2026-34933 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1854 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1986 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1983 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1984 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10670-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34933 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-34933 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-34933 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-34933 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8269-1 · Vendor Advisory