CVE-2006-5461 - CVE House
Back to Database
Status published Low CVE-2006-5461

Avahi before 0.6.15 does not verify the sender identity of...

Vulnerability Description

Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-5461

Credits & Attribution

No credits recorded in the NVD database.

References

More from avahi

View All →
CVE-2025-68471
Avahi has a reachable assertion in lookup_start
Medium 6.5
CVE-2025-68468
Avahi has a reachable assertion in lookup_multicast_callback
Medium 6.5
CVE-2025-68276
Avahi has a reachable assertion in avahi_wide_area_scan_cache
Medium 5.5
CVE-2025-59529
simple protocol server ignores accepts unlimited connections and logs failures without limit
Medium 5.5
CVE-2021-26720
avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed...
High 7.8

Affected Vendor

Affected Software

avahi
Vulnerable Versions:
0

Timeline

Official Publish: November 14th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.