All packages
Avahi-daemon vulnerabilities
3 known CVE vulnerabilities in Avahi-daemon, translated and rated.
- CVE-2017-6519Critical
avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, allowing remote attackers to cause a denial of service (traffic amplification) and may lead to information leakage.
- CVE-2024-52616Medium
A flaw was found in Avahi-daemon where DNS transaction IDs are initialized randomly only once at startup and then incremented sequentially. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.
- CVE-2024-52615Medium
A flaw in Avahi-daemon uses fixed source ports for wide-area DNS queries, making it easier for attackers to inject malicious DNS responses.