Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-24401

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., "h.local" as a CNAME for "h.local"). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 9.8%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2026-24401
  • Avahi » Avahi » Version: 0.1
    cpe:2.3:a:avahi:avahi:0.1
  • Avahi » Avahi » Version: 0.2
    cpe:2.3:a:avahi:avahi:0.2
  • Avahi » Avahi » Version: 0.3
    cpe:2.3:a:avahi:avahi:0.3
  • Avahi » Avahi » Version: 0.4
    cpe:2.3:a:avahi:avahi:0.4
  • Avahi » Avahi » Version: 0.5
    cpe:2.3:a:avahi:avahi:0.5
  • Avahi » Avahi » Version: 0.5.1
    cpe:2.3:a:avahi:avahi:0.5.1
  • Avahi » Avahi » Version: 0.5.2
    cpe:2.3:a:avahi:avahi:0.5.2
  • Avahi » Avahi » Version: 0.6
    cpe:2.3:a:avahi:avahi:0.6
  • Avahi » Avahi » Version: 0.6.1
    cpe:2.3:a:avahi:avahi:0.6.1
  • Avahi » Avahi » Version: 0.6.10
    cpe:2.3:a:avahi:avahi:0.6.10
  • Avahi » Avahi » Version: 0.6.11
    cpe:2.3:a:avahi:avahi:0.6.11
  • Avahi » Avahi » Version: 0.6.12
    cpe:2.3:a:avahi:avahi:0.6.12
  • Avahi » Avahi » Version: 0.6.13
    cpe:2.3:a:avahi:avahi:0.6.13
  • Avahi » Avahi » Version: 0.6.14
    cpe:2.3:a:avahi:avahi:0.6.14
  • Avahi » Avahi » Version: 0.6.15
    cpe:2.3:a:avahi:avahi:0.6.15
  • Avahi » Avahi » Version: 0.6.16
    cpe:2.3:a:avahi:avahi:0.6.16
  • Avahi » Avahi » Version: 0.6.17
    cpe:2.3:a:avahi:avahi:0.6.17
  • Avahi » Avahi » Version: 0.6.18
    cpe:2.3:a:avahi:avahi:0.6.18
  • Avahi » Avahi » Version: 0.6.19
    cpe:2.3:a:avahi:avahi:0.6.19
  • Avahi » Avahi » Version: 0.6.2
    cpe:2.3:a:avahi:avahi:0.6.2
  • Avahi » Avahi » Version: 0.6.20
    cpe:2.3:a:avahi:avahi:0.6.20
  • Avahi » Avahi » Version: 0.6.21
    cpe:2.3:a:avahi:avahi:0.6.21
  • Avahi » Avahi » Version: 0.6.22
    cpe:2.3:a:avahi:avahi:0.6.22
  • Avahi » Avahi » Version: 0.6.23
    cpe:2.3:a:avahi:avahi:0.6.23
  • Avahi » Avahi » Version: 0.6.24
    cpe:2.3:a:avahi:avahi:0.6.24
  • Avahi » Avahi » Version: 0.6.25
    cpe:2.3:a:avahi:avahi:0.6.25
  • Avahi » Avahi » Version: 0.6.26
    cpe:2.3:a:avahi:avahi:0.6.26
  • Avahi » Avahi » Version: 0.6.27
    cpe:2.3:a:avahi:avahi:0.6.27
  • Avahi » Avahi » Version: 0.6.28
    cpe:2.3:a:avahi:avahi:0.6.28
  • Avahi » Avahi » Version: 0.6.29
    cpe:2.3:a:avahi:avahi:0.6.29
  • Avahi » Avahi » Version: 0.6.3
    cpe:2.3:a:avahi:avahi:0.6.3
  • Avahi » Avahi » Version: 0.6.30
    cpe:2.3:a:avahi:avahi:0.6.30
  • Avahi » Avahi » Version: 0.6.31
    cpe:2.3:a:avahi:avahi:0.6.31
  • Avahi » Avahi » Version: 0.6.32
    cpe:2.3:a:avahi:avahi:0.6.32
  • Avahi » Avahi » Version: 0.6.4
    cpe:2.3:a:avahi:avahi:0.6.4
  • Avahi » Avahi » Version: 0.6.5
    cpe:2.3:a:avahi:avahi:0.6.5
  • Avahi » Avahi » Version: 0.6.6
    cpe:2.3:a:avahi:avahi:0.6.6
  • Avahi » Avahi » Version: 0.6.7
    cpe:2.3:a:avahi:avahi:0.6.7
  • Avahi » Avahi » Version: 0.6.8
    cpe:2.3:a:avahi:avahi:0.6.8
  • Avahi » Avahi » Version: 0.6.9
    cpe:2.3:a:avahi:avahi:0.6.9
  • Avahi » Avahi » Version: 0.7
    cpe:2.3:a:avahi:avahi:0.7
  • Avahi » Avahi » Version: 0.7-20
    cpe:2.3:a:avahi:avahi:0.7-20
  • Avahi » Avahi » Version: 0.8
    cpe:2.3:a:avahi:avahi:0.8
  • Avahi » Avahi » Version: 0.8-4
    cpe:2.3:a:avahi:avahi:0.8-4
  • Avahi » Avahi » Version: 0.8-5
    cpe:2.3:a:avahi:avahi:0.8-5
  • Avahi » Avahi » Version: 0.9
    cpe:2.3:a:avahi:avahi:0.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved