CVE-2024-52616
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
A flaw was found in Avahi-daemon where DNS transaction IDs are initialized randomly only once at startup and then incremented sequentially. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.
Risk Assessment
The organization is at risk of DNS spoofing attacks that can redirect network traffic to malicious servers, leading to data theft or malware infection.
Recommendation
Immediately update Avahi-daemon to a version that fixes the DNS transaction ID generation, and consider temporarily disabling the Avahi service if not essential.
Original NVD description (English source)
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.