Avahi DoS Vulnerability Advisory - CVSS 5.5 Medium Severity

CERT-Bund published security advisory WID-SEC-2026-0975 disclosing a medium-severity denial of service vulnerability in Avahi, a zero-configuration networking implementation used in Linux and UNIX environments. A local attacker can exploit this vulnerability to cause service disruption. The CVSS score of 5.5 (medium) indicates moderate impact on availability without remote exploitation capability. The recommended mitigation is updating to version 0.9-rc4 or later.

Organizations operating Linux/UNIX systems with Avahi installed face potential availability risks if the vulnerability is exploited. System administrators should prioritize identifying and patching affected installations, particularly in environments where Avahi is used for service discovery. Given the local attack vector, organizations should also review access controls to limit local user privileges on affected systems.