CVE-2026-34933 is a denial of service vulnerability in Avahi, a system facilitating service discovery on local networks. Prior to version 0.9-rc4, an unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4. The vulnerability allows an attacker to cause a denial of service, potentially disrupting ser [truncated]
Avahi versions 0.9rc2 and below are vulnerable to a segmentation fault caused by an unsolicited mDNS response with a recursive CNAME record, leading to stack exhaustion. This issue affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly. The vulnerability is patched in version 0.9-rc3. Defenders should assess exposure and prioritize updates, especially in environments using affected rec [truncated]
