UBUNTU-CVE-2026-24401

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-24401
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-24401.json
JSON Data
https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2026-24401
Upstream
Published
2026-01-24T02:15:00Z
Modified
2026-02-17T21:33:19.017585Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., "h.local" as a CNAME for "h.local"). This causes unbounded recursion in the lookuphandlecname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHILOOKUPUSE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524.

References

Affected packages

Ubuntu:22.04:LTS
avahi

Package

Name
avahi
Purl
pkg:deb/ubuntu/avahi@0.8-5ubuntu5.4?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.8-5ubuntu4
0.8-5ubuntu5
0.8-5ubuntu5.1
0.8-5ubuntu5.2
0.8-5ubuntu5.3
0.8-5ubuntu5.4

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "avahi-autoipd",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "avahi-daemon",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "avahi-discover",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "avahi-dnsconfd",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "avahi-ui-utils",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "avahi-utils",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "gir1.2-avahi-0.6",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "libavahi-client-dev",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "libavahi-client3",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "libavahi-common-data",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "libavahi-common-dev",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "libavahi-common3",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "libavahi-compat-libdnssd-dev",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "libavahi-compat-libdnssd1",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "libavahi-core-dev",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "libavahi-core7",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "libavahi-glib-dev",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "libavahi-glib1",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "libavahi-gobject-dev",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "libavahi-gobject0",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "libavahi-ui-gtk3-0",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "libavahi-ui-gtk3-dev",
            "binary_version": "0.8-5ubuntu5.4"
        },
        {
            "binary_name": "python3-avahi",
            "binary_version": "0.8-5ubuntu5.4"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-24401.json"
Ubuntu:24.04:LTS
avahi

Package

Name
avahi
Purl
pkg:deb/ubuntu/avahi@0.8-13ubuntu6.1?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.8-10ubuntu1
0.8-13ubuntu1
0.8-13ubuntu2
0.8-13ubuntu4
0.8-13ubuntu5
0.8-13ubuntu6
0.8-13ubuntu6.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "avahi-autoipd",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "avahi-daemon",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "avahi-discover",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "avahi-dnsconfd",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "avahi-ui-utils",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "avahi-utils",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "gir1.2-avahi-0.6",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "libavahi-client-dev",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "libavahi-client3",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "libavahi-common-data",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "libavahi-common-dev",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "libavahi-common3",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "libavahi-compat-libdnssd-dev",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "libavahi-compat-libdnssd1",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "libavahi-core-dev",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "libavahi-core7",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "libavahi-glib-dev",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "libavahi-glib1",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "libavahi-gobject-dev",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "libavahi-gobject0",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "libavahi-ui-gtk3-0",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "libavahi-ui-gtk3-dev",
            "binary_version": "0.8-13ubuntu6.1"
        },
        {
            "binary_name": "python3-avahi",
            "binary_version": "0.8-13ubuntu6.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-24401.json"
Ubuntu:25.10
avahi

Package

Name
avahi
Purl
pkg:deb/ubuntu/avahi@0.8-16ubuntu3.1?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.8-16ubuntu2
0.8-16ubuntu3
0.8-16ubuntu3.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "avahi-autoipd",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "avahi-daemon",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "avahi-discover",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "avahi-dnsconfd",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "avahi-ui-utils",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "avahi-utils",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "gir1.2-avahi-0.6",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "libavahi-client-dev",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "libavahi-client3",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "libavahi-common-data",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "libavahi-common-dev",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "libavahi-common3",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "libavahi-compat-libdnssd-dev",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "libavahi-compat-libdnssd1",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "libavahi-core-dev",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "libavahi-core7",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "libavahi-glib-dev",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "libavahi-glib1",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "libavahi-gobject-dev",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "libavahi-gobject0",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "libavahi-ui-gtk3-0",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "libavahi-ui-gtk3-dev",
            "binary_version": "0.8-16ubuntu3.1"
        },
        {
            "binary_name": "python3-avahi",
            "binary_version": "0.8-16ubuntu3.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-24401.json"
Ubuntu:Pro:14.04:LTS
avahi

Package

Name
avahi
Purl
pkg:deb/ubuntu/avahi@0.6.31-4ubuntu1.3+esm4?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.6.31-2ubuntu4
0.6.31-2ubuntu5
0.6.31-3ubuntu1
0.6.31-4ubuntu1
0.6.31-4ubuntu1.1
0.6.31-4ubuntu1.2
0.6.31-4ubuntu1.3
0.6.31-4ubuntu1.3+esm1
0.6.31-4ubuntu1.3+esm2
0.6.31-4ubuntu1.3+esm3
0.6.31-4ubuntu1.3+esm4

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "avahi-autoipd",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "avahi-daemon",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "avahi-discover",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "avahi-dnsconfd",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "avahi-ui-utils",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "avahi-utils",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-client-dev",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-client3",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-common-data",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-common-dev",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-common3",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-compat-libdnssd-dev",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-compat-libdnssd1",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-core-dev",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-core7",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-glib-dev",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-glib1",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-gobject-dev",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-gobject0",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-qt4-1",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-qt4-dev",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-ui-dev",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-ui-gtk3-0",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-ui-gtk3-dev",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "libavahi-ui0",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        },
        {
            "binary_name": "python-avahi",
            "binary_version": "0.6.31-4ubuntu1.3+esm4"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-24401.json"
Ubuntu:Pro:16.04:LTS
avahi

Package

Name
avahi
Purl
pkg:deb/ubuntu/avahi@0.6.32~rc+dfsg-1ubuntu2.3+esm4?arch=source&distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.6.31-4ubuntu4
0.6.32~rc+dfsg-1ubuntu2
0.6.32~rc+dfsg-1ubuntu2.1
0.6.32~rc+dfsg-1ubuntu2.2
0.6.32~rc+dfsg-1ubuntu2.3
0.6.32~rc+dfsg-1ubuntu2.3+esm1
0.6.32~rc+dfsg-1ubuntu2.3+esm2
0.6.32~rc+dfsg-1ubuntu2.3+esm3
0.6.32~rc+dfsg-1ubuntu2.3+esm4

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "avahi-autoipd",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "avahi-daemon",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "avahi-discover",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "avahi-dnsconfd",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "avahi-ui-utils",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "avahi-utils",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-client-dev",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-client3",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-common-data",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-common-dev",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-common3",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-compat-libdnssd-dev",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-compat-libdnssd1",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-core-dev",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-core7",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-glib-dev",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-glib1",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-gobject-dev",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-gobject0",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-qt4-1",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-qt4-dev",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-ui-dev",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-ui-gtk3-0",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-ui-gtk3-dev",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "libavahi-ui0",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        },
        {
            "binary_name": "python-avahi",
            "binary_version": "0.6.32~rc+dfsg-1ubuntu2.3+esm4"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-24401.json"
Ubuntu:Pro:18.04:LTS
avahi

Package

Name
avahi
Purl
pkg:deb/ubuntu/avahi@0.7-3.1ubuntu1.3+esm3?arch=source&distro=esm-infra/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.6.32-1ubuntu1
0.7-3ubuntu1
0.7-3ubuntu2
0.7-3.1ubuntu1
0.7-3.1ubuntu1.1
0.7-3.1ubuntu1.2
0.7-3.1ubuntu1.3
0.7-3.1ubuntu1.3+esm1
0.7-3.1ubuntu1.3+esm2
0.7-3.1ubuntu1.3+esm3

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "avahi-autoipd",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "avahi-daemon",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "avahi-discover",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "avahi-dnsconfd",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "avahi-ui-utils",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "avahi-utils",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "gir1.2-avahi-0.6",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "libavahi-client-dev",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "libavahi-client3",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "libavahi-common-data",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "libavahi-common-dev",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "libavahi-common3",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "libavahi-compat-libdnssd-dev",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "libavahi-compat-libdnssd1",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "libavahi-core-dev",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "libavahi-core7",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "libavahi-glib-dev",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "libavahi-glib1",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "libavahi-gobject-dev",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "libavahi-gobject0",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "libavahi-ui-gtk3-0",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "libavahi-ui-gtk3-dev",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        },
        {
            "binary_name": "python-avahi",
            "binary_version": "0.7-3.1ubuntu1.3+esm3"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-24401.json"
Ubuntu:Pro:20.04:LTS
avahi

Package

Name
avahi
Purl
pkg:deb/ubuntu/avahi@0.7-4ubuntu7.3+esm1?arch=source&distro=esm-infra/focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.7-4ubuntu5
0.7-4ubuntu6
0.7-4ubuntu7
0.7-4ubuntu7.1
0.7-4ubuntu7.2
0.7-4ubuntu7.3
0.7-4ubuntu7.3+esm1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "avahi-autoipd",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "avahi-daemon",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "avahi-discover",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "avahi-dnsconfd",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "avahi-ui-utils",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "avahi-utils",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "gir1.2-avahi-0.6",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "libavahi-client-dev",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "libavahi-client3",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "libavahi-common-data",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "libavahi-common-dev",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "libavahi-common3",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "libavahi-compat-libdnssd-dev",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "libavahi-compat-libdnssd1",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "libavahi-core-dev",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "libavahi-core7",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "libavahi-glib-dev",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "libavahi-glib1",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "libavahi-gobject-dev",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "libavahi-gobject0",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "libavahi-ui-gtk3-0",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "libavahi-ui-gtk3-dev",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        },
        {
            "binary_name": "python-avahi",
            "binary_version": "0.7-4ubuntu7.3+esm1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-24401.json"