AZL-74285
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-74285.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-74285
- Upstream
- Published
- 2026-01-12T18:15:47Z
- Modified
- 2026-04-21T04:38:41.934776Z
- Summary
- CVE-2025-68276 affecting package avahi for versions less than 0.8-6
- Details
-
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHILOOKUPUSEWIDEAREA flag set via D-Bus. This can be done by either calling the RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.
- References