{"action":"Upgrade avahi to 0.6.24-3 or later.","affected":[{"fixed":"0.6.24-3","introduced":"0"}],"component":"avahi","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["0.6.24-3"],"id":"tcs_01M5N987J1B32KHW8BER8VAVC0","modified_at":"2026-10-23T17:47:50.277904440Z","published_at":"2009-03-03T16:30:05.313Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2009-0758","https://security-tracker.debian.org/tracker/CVE-2009-0758"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2009-0758#Debian:14/avahi","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2009-0758"}],"summary":"The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast p"}