A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade avahi-compat-howl-develUpgrade avahi-glibUpgrade avahi-toolsUpgrade avahi-develUpgrade avahi-gobject-develUpgrade avahi-libsUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-howlUpgrade avahiUpgrade avahi-gobjectUpgrade avahi-autoipdUpgrade avahi-compat-libdns_sd-develUpgrade avahi-glib-devel | May 22, 2025 | Nov 21, 2024 |
| Alpine Linux | — | Upgrade avahi | Aug 8, 2025 | Nov 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade avahi-qt4-develUpgrade avahi-qt3-develUpgrade avahi-debuginfoUpgrade avahi-qt4Upgrade avahi-ui-toolsUpgrade avahi-compat-howl-develUpgrade avahi-uiUpgrade avahi-toolsUpgrade avahi-compat-howlUpgrade avahi-dnsconfdUpgrade avahi-autoipdUpgrade avahi-glib-develUpgrade avahi-libsUpgrade avahiUpgrade avahi-gobjectUpgrade avahi-qt3Upgrade avahi-compat-libdns_sd-develUpgrade avahi-develUpgrade avahi-ui-develUpgrade avahi-compat-libdns_sdUpgrade avahi-glibUpgrade avahi-ui-gtk3Upgrade avahi-gobject-devel | Dec 20, 2024 | Nov 21, 2024 |
| Amazon_linux_2023 | — | Upgrade avahi-debugsourceUpgrade avahi-debuginfoUpgrade avahi-glibUpgrade avahi-libs-debuginfoUpgrade avahi-compat-howl-develUpgrade avahi-glib-develUpgrade avahi-gobjectUpgrade avahi-toolsUpgrade avahi-gobject-debuginfoUpgrade avahi-tools-debuginfoUpgrade avahiUpgrade avahi-glib-debuginfoUpgrade avahi-develUpgrade avahi-autoipd-debuginfoUpgrade avahi-ui-develUpgrade avahi-ui-gtk3Upgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-compat-libdns_sd-develUpgrade avahi-libsUpgrade avahi-compat-howlUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-autoipdUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-gobject-develUpgrade avahi-dnsconfdUpgrade avahi-compat-howl-debuginfoUpgrade avahi-compat-libdns_sd | Feb 17, 2025 | Nov 15, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Nov 21, 2024 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade avahi-libs | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade avahi-libs | Dec 12, 2025 | Dec 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade avahi-libs | Jan 15, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade avahi-libs | Dec 12, 2025 | Dec 11, 2025 |
| Oracle_linux | — | Upgrade avahi-glib-develUpgrade avahi-gobject-develUpgrade avahiUpgrade avahi-libsUpgrade avahi-compat-libdns_sd-develUpgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahi-compat-libdns_sdUpgrade avahi-develUpgrade avahi-toolsUpgrade avahi-compat-howlUpgrade avahi-compat-howl-develUpgrade avahi-glib | May 26, 2025 | Nov 15, 2024 |
| Redhat_linux | — | Upgrade avahi-develUpgrade avahi-ui-tools-debuginfoNo solution existsUpgrade avahi-glib-debuginfoUpgrade avahi-tools-debuginfoUpgrade avahi-autoipdUpgrade avahi-glib-develUpgrade avahi-libs-debuginfoUpgrade avahi-debugsourceUpgrade avahi-compat-howl-debuginfoUpgrade avahi-compat-howl-develUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-compat-libdns_sdUpgrade avahi-gobject-debuginfoUpgrade avahi-ui-debuginfoUpgrade avahi-gobjectUpgrade avahiUpgrade avahi-compat-howlUpgrade avahi-autoipd-debuginfoUpgrade avahi-toolsUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-libsUpgrade avahi-debuginfoUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-glibUpgrade avahi-compat-libdns_sd-develUpgrade avahi-gobject-devel | May 15, 2025 | Nov 21, 2024 |
| Rocky_linux | — | Upgrade avahi-libs-debuginfoUpgrade avahi-compat-howl-develUpgrade avahi-toolsUpgrade avahi-gobject-debuginfoUpgrade avahi-debuginfoUpgrade avahi-compat-howl-debuginfoUpgrade avahi-debugsourceUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-compat-howlUpgrade avahi-gobjectUpgrade avahi-compat-libdns_sd-develUpgrade avahi-tools-debuginfoUpgrade avahi-glib-debuginfoUpgrade avahi-libsUpgrade avahi-develUpgrade avahi-glibUpgrade avahi-compat-libdns_sdUpgrade avahi-autoipdUpgrade avahiUpgrade avahi-gobject-develUpgrade avahi-autoipd-debuginfoUpgrade avahi-glib-devel | Nov 4, 2025 | Oct 4, 2025 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub