CVE-2026-34933: avahi — Katalog CVE

csirt@kutim:~/threat-intel/cve/CVE-2026-34933

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan Reachable Assertion pada avahi. Skor CVSS 3.1 5.5 (Medium) menurut github.com.

Deskripsi (NVD)

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.

Rincian

Terbit di NVD: 3 April 2026
Terakhir diubah: 24 Juli 2026
Status NVD: Analyzed
CVSS 3.1: 5.5 (Medium), sumber github.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-617: Reachable Assertion
EPSS (30 hari): 0,16% peluang dieksploitasi; lebih tinggi dari 4,8% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
avahi	avahi	Semua versi sebelum 0.9
avahi	avahi	Versi 0.9 rc1
avahi	avahi	Versi 0.9 rc2
avahi	avahi	Versi 0.9 rc3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/avahi/avahi/security/advisories/GHSA-w65r-6gxh-vhvc exploit · patch · advisory vendor
https://github.com/avahi/avahi/commit/625ca0fac19229f6dfa3a6c6b698ae657187e50c patch
https://github.com/avahi/avahi/pull/891 issue tracking · patch
http://www.openwall.com/lists/oss-security/2026/04/11/9 exploit · mailing list · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.