CVE-2024-52616

EUVD-2024-46029
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 24%
Debian logo
Debian Releases
Debian Product
Codename
avahi
bookworm
no-dsa
bullseye
postponed
bullseye (security)
vulnerable
forky
vulnerable
sid
vulnerable
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
avahi
bionic
deferred
focal
deferred
jammy
deferred
noble
deferred
oracular
ignored
plucky
deferred
questing
deferred
trusty
needs-triage
xenial
deferred
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
avahi
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
avahi-autoipd
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
avahi-compat-howl-devel
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
avahi-compat-mDNSResponder-devel
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
avahi-lang
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
avahi-utils
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
avahi-utils-gtk
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
libavahi-client3
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
libavahi-client3-32bit
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
libavahi-common3
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
libavahi-common3-32bit
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
libavahi-core7
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
libavahi-devel
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
libavahi-glib-devel
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
libavahi-glib1
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
libavahi-gobject-devel
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
libavahi-gobject0
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
libavahi-libevent1
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
libavahi-ui-gtk3-0
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
libdns_sd
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
libhowl0
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
typelib-1_0-Avahi-0_6
suse enterprise desktop 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise desktop 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise desktop 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise sap 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise sap 15 SP7
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP4
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP5
0.8-150400.7.20.1
fixed
suse enterprise server 15 SP6
0.8-150600.15.6.1
fixed
suse enterprise server 15 SP7
0.8-150600.15.6.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
avahi
RHEL 9
0:0.8-22.el9_6
fixed
avahi-autoipd
RHEL 9
0:0.8-22.el9_6
fixed
avahi-compat-howl
RHEL 9
0:0.8-22.el9_6
fixed
avahi-compat-howl-devel
RHEL 9
0:0.8-22.el9_6
fixed
avahi-compat-libdns
RHEL 9
0:0.8-22.el9_6
fixed
avahi-devel
RHEL 9
0:0.8-22.el9_6
fixed
avahi-glib
RHEL 9
0:0.8-22.el9_6
fixed
avahi-glib-devel
RHEL 9
0:0.8-22.el9_6
fixed
avahi-gobject
RHEL 9
0:0.8-22.el9_6
fixed
avahi-gobject-devel
RHEL 9
0:0.8-22.el9_6
fixed
avahi-libs
RHEL 9
0:0.8-22.el9_6
fixed
avahi-tools
RHEL 9
0:0.8-22.el9_6
fixed
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2025:7437
https://access.redhat.com/security/cve/CVE-2024-52616
https://bugzilla.redhat.com/show_bug.cgi?id=2326429
https://github.com/avahi/avahi/pull/577