Summary
It is discovered that Avahi incorrectly handled crafted input. A
remote attacker could possibly use this issue to crash the program,
resulting in a denial of service. This issue only affected Ubuntu
14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,
Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-24401)
Guillaume Meunier discovered that Avahi incorrectly handled crafted
input. An attacker could possibly use this issue to crash the
program, resulting in a denial of service. (CVE-2026-34933)
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | avahi | 0.8-5ubuntu5.5 |
| Ubuntu · 24.04 LTS 24.04:LTS | avahi | 0.8-13ubuntu6.2 |
| Ubuntu · 25.10 | avahi | 0.8-16ubuntu3.2 |
| Ubuntu · 26.04 LTS 26.04:LTS | avahi | 0.8-18ubuntu1.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | avahi | 0.6.31-4ubuntu1.3+esm5 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | avahi | 0.6.32~rc+dfsg-1ubuntu2.3+esm5 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | avahi | 0.7-3.1ubuntu1.3+esm4 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | avahi | 0.7-4ubuntu7.3+esm2 |