AZL-74288
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-74288.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-74288
- Upstream
- Published
- 2026-01-12T18:15:48Z
- Modified
- 2026-04-21T04:38:41.882561Z
- Summary
- CVE-2025-68468 affecting package avahi for versions less than 0.8-6
- Details
-
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs. As soon as they expire avahi-daemon crashes.
- References