avahi-glib2 (SUSE:Linux Enterprise Module for Desktop Applications 15 SP7) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Desktop Applications 15 SP7 package avahi-glib2, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2025-68468 — CVSS 6.5 (medium): Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier…
• CVE-2025-68471 — CVSS 6.5 (medium): Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier…
• CVE-2026-24401 — CVSS 6.5 (medium): Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below…
• CVE-2025-68276 — CVSS 5.5 (medium): Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an…
• CVE-2024-52615 — CVSS 5.3 (medium): A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where…