CVE-2006-5461

no score yetEPSS 0.4%

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
Published: 2006-11-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

avahi:avahi

References

http://avahi.org/milestone/Avahi%200.6.15
http://secunia.com/advisories/22807
http://secunia.com/advisories/22852
http://secunia.com/advisories/22932
http://secunia.com/advisories/23020

Check your stack JSON