Bug 2501852 (CVE-2026-48045) - CVE-2026-48045 zeroconf: Zeroconf: Unauthenticated network attacker can cause Denial of Service
Summary: CVE-2026-48045 zeroconf: Zeroconf: Unauthenticated network attacker can cause...
Keywords:
Status: NEW
Alias: CVE-2026-48045
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2508072
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-07-17 19:02 UTC by OSIDB Bzimport
Modified: 2026-07-28 17:33 UTC (History)
7 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-07-17 19:02:28 UTC 
Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handle_query_or_defer retained every truncated TC-bit incoming query, each up to _MAX_MSG_ABSOLUTE = 8966 bytes, in self._deferred[addr] and armed a per-address timer in self._timers[addr] without capping the per-address list or distinct addr keys, allowing unauthenticated hosts on the local link over UDP/5353 (224.0.0.251 / ff02::fb) to spoof sources, grow _deferred and _timers, and cause memory exhaustion and quadratic CPU burn. This issue is fixed in version 0.149.12.
Note You need to log in before you can comment on or make changes to this bug.