CVE-2025-68471— Avahi has a reachable assertion in lookup_start
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-68471
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Avahi has a reachable assertion in lookup_start
Source: NVD (National Vulnerability Database)
Vulnerability Description
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
可达断言
Source: NVD (National Vulnerability Database)
Vulnerability Title
Avahi 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Avahi是Avahi开源的一套用于Linux的本地服务发现工具。 Avahi 0.9-rc2及之前版本存在安全漏洞，该漏洞源于相隔2秒发送2个包含CNAME资源记录的未经请求公告，可能导致avahi-daemon崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-68471
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-68471
请登录查看更多情报信息。
Same Patch Batch · avahi · 2026-01-12 · 3 CVEs total
| CVE-2025-68468 | 6.5 MEDIUM | Avahi has a reachable assertion in lookup_multicast_callback |
| CVE-2025-68276 | 5.5 MEDIUM | Avahi has a reachable assertion in avahi_wide_area_scan_cache |
IV. Related Vulnerabilities
Same product: avahi
- CVE-2026-34933
Avahi: Reachable assertion in `transport_flags_from_domain() - CVE-2026-24401
Avahi has Uncontrolled Recursion in lookup_handle_cname func - CVE-2025-68468
Avahi has a reachable assertion in lookup_multicast_callback - CVE-2025-68276
Avahi has a reachable assertion in avahi_wide_area_scan_cach - CVE-2025-59529
simple protocol server ignores accepts unlimited connections
Same vendor: avahi
- CVE-2026-34933
Avahi: Reachable assertion in `transport_flags_from_domain() - CVE-2026-24401
Avahi has Uncontrolled Recursion in lookup_handle_cname func - CVE-2025-68468
Avahi has a reachable assertion in lookup_multicast_callback - CVE-2025-68276
Avahi has a reachable assertion in avahi_wide_area_scan_cach - CVE-2025-59529
simple protocol server ignores accepts unlimited connections
Same weakness: CWE-617
- CVE-2026-8257
WebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn asser - CVE-2026-41584
ZEBRA: rk Identity Point Panic in Transaction Verification - CVE-2026-20450
MediaTek Chipsets 安全漏洞 - CVE-2026-41485
Kyverno Controller Denial of Service via forEach Mutation Pa - CVE-2026-34067
nimiq-transaction vulnerable to panic via `HistoryTreeProof`
V. Comments for CVE-2025-68471
No comments yet