CVE-2017-6519

Critical

Published: 01/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, allowing remote attackers to cause a denial of service (traffic amplification) and may lead to information leakage.

Risk Assessment

Attackers can exploit this vulnerability to amplify network traffic and potentially obtain sensitive information from the responding device.

Recommendation

It is recommended to update Avahi to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.