Summary
It was discovered that Avahi incorrectly terminated when processing browser
records with wide-area disabled. An attacker could possibly use this issue
to cause Avahi to crash, resulting in a denial of service. (CVE-2025-68276)
It was discovered that Avahi incorrectly terminated when processing
unsolicited CNAME records pointing to resource records with short TTLs. An
attacker could possibly use this issue to cause Avahi to crash, resulting
in a denial of service. (CVE-2025-68468)
It was discovered that Avahi incorrectly terminated when processing
unsolicited CNAME records in quick succession. An attacker could possibly
use this issue to cause Avahi to crash, resulting in a denial of service.
(CVE-2025-68471)
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | avahi | 0.8-5ubuntu5.4 |
| Ubuntu · 24.04 LTS 24.04:LTS | avahi | 0.8-13ubuntu6.1 |
| Ubuntu · 25.10 | avahi | 0.8-16ubuntu3.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | avahi | 0.6.31-4ubuntu1.3+esm4 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | avahi | 0.6.32~rc+dfsg-1ubuntu2.3+esm4 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | avahi | 0.7-3.1ubuntu1.3+esm3 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | avahi | 0.7-4ubuntu7.3+esm1 |