CVE-2017-6519
CriticalSummary
avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, allowing remote attackers to cause a denial of service (traffic amplification) and may lead to information leakage.
Risk Assessment
Attackers can exploit this vulnerability to amplify network traffic and potentially obtain sensitive information from the responding device.
Recommendation
It is recommended to update Avahi to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in avahi-daemon
See all- CVE-2024-52616Medium
A flaw was found in Avahi-daemon where DNS transaction IDs are initialized randomly only once at startup and then incremented sequentially. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.
- CVE-2024-52615Medium
A flaw in Avahi-daemon uses fixed source ports for wide-area DNS queries, making it easier for attackers to inject malicious DNS responses.
Original NVD description (English source)
avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.