Avahi Security

The following security vulnerabilities have been discovered in Avahi:

  • 5/9/2006 CVE-2006-2288 Low Risk; Fixed in Avahi 0.6.10, all previous versions are vulnerable
  • 5/9/2006 CVE-2006-2289 Low Risk; Fixed in Avahi 0.6.10, all previous versions are vulnerable
  • 11/14/2006 CVE-2006-5461 Low Risk; Fixed in Avahi 0.6.15, all previous versions are vulnerable
  • 12/31/2006 CVE-2006-6870 Low Risk; Fixed in Avahi 0.6.16, all previous versions are vulnerable
  • 6/22/2007 CVE-2007-3372 Low Risk; Fixed in Avahi 0.6.20, all versions since and including 0.6.17 are vulnerable
  • 11/14/2008 CVE-2008-5081 Low Risk; Fixed in Avahi 0.6.24, all previous versions are vulnerable
  • 03/03/2009 CVE-2009-0758 Low Risk; Fixed in Avahi 0.6.25, all previous versions are vulnerable
  • 07/08/2010 CVE-2010-2244 Low Risk; Fixed in Avahi 0.6.26, all previous versions are vulnerable
  • 02/22/2011 CVE-2011-1002 Low Risk; Fixed in Avahi 0.6.29, all versions since and including 0.6.26 are vulnerable

Please read SecurityConsiderations for more information about Security measures in Avahi.