avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade avahi | Aug 22, 2024 | May 1, 2017 |
| Amazon Linux Ami 2 | — | Upgrade avahi-gobjectUpgrade avahi-uiUpgrade avahi-glibUpgrade avahi-develUpgrade avahi-compat-howl-develUpgrade avahi-compat-libdns_sdUpgrade avahi-qt3-develUpgrade avahi-debuginfoUpgrade avahi-autoipdUpgrade avahi-qt4Upgrade avahi-glib-develUpgrade avahi-dnsconfdUpgrade avahi-ui-develUpgrade avahi-qt3Upgrade avahi-compat-libdns_sd-develUpgrade avahiUpgrade avahi-ui-toolsUpgrade avahi-gobject-develUpgrade avahi-qt4-develUpgrade avahi-libsUpgrade avahi-ui-gtk3Upgrade avahi-toolsUpgrade avahi-compat-howl | Oct 28, 2020 | May 1, 2017 |
| Centos_linux | — | Upgrade avahi-compat-howlUpgrade avahi-libsUpgrade avahi-ui-develUpgrade avahi-glibUpgrade avahi-qt4Upgrade avahi-qt3Upgrade avahi-gobjectUpgrade avahi-toolsUpgrade avahi-compat-libdns_sd-develUpgrade avahi-debuginfoUpgrade avahi-qt3-develUpgrade avahi-gobject-develUpgrade avahi-glib-develUpgrade avahiUpgrade avahi-develUpgrade avahi-dnsconfdUpgrade avahi-ui-gtk3Upgrade avahi-autoipdUpgrade avahi-ui-toolsUpgrade avahi-compat-libdns_sdUpgrade avahi-uiUpgrade avahi-compat-howl-develUpgrade avahi-qt4-devel | Apr 1, 2020 | May 1, 2017 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | May 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade avahi-libsUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-glibUpgrade avahi-ui-gtk3Upgrade avahi-gobject | Jul 23, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-gobjectUpgrade avahi-autoipdUpgrade avahi-libsUpgrade avahi-glib | Sep 25, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade avahi-libsUpgrade avahi-gobjectUpgrade avahi-autoipdUpgrade avahi-glibUpgrade avahi-ui-gtk3Upgrade avahi | Sep 24, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-avahiUpgrade avahi-glibUpgrade avahi-libsUpgrade avahi-gobjectUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-ui-gtk3 | Jun 27, 2019 | May 1, 2017 |
| Oracle_linux | — | Upgrade avahi-develUpgrade avahi-autoipdUpgrade avahi-qt4-develUpgrade avahiUpgrade avahi-qt3-develUpgrade avahi-ui-toolsUpgrade avahi-ui-gtk3Upgrade avahi-compat-howl-develUpgrade avahi-uiUpgrade avahi-ui-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-toolsUpgrade avahi-qt3Upgrade avahi-gobjectUpgrade avahi-compat-howlUpgrade avahi-compat-libdns_sdUpgrade avahi-glib-develUpgrade avahi-libsUpgrade avahi-dnsconfdUpgrade avahi-gobject-develUpgrade avahi-qt4Upgrade avahi-glib | Oct 5, 2022 | Mar 31, 2015 |
| Redhat_linux | — | Upgrade avahi-qt4-develUpgrade avahi-ui-gtk3Upgrade avahi-glibUpgrade avahi-gobjectUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-compat-libdns_sdNo solution existsUpgrade avahi-develUpgrade avahi-ui-toolsUpgrade avahi-compat-howl-develUpgrade avahi-qt3-develUpgrade avahi-dnsconfdUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-howlUpgrade avahi-libsUpgrade avahi-qt3Upgrade avahi-uiUpgrade avahi-gobject-develUpgrade avahi-qt4Upgrade avahi-ui-develUpgrade avahi-debuginfoUpgrade avahi-toolsUpgrade avahi-glib-devel | Apr 1, 2020 | May 1, 2017 |
| Suse | — | Upgrade libavahi-ui-gtk3-0Upgrade libavahi-client3Upgrade avahiUpgrade libavahi-gobject0Upgrade libavahi-gobject-develUpgrade libavahi-common3Upgrade avahi-utilsUpgrade libavahi-develUpgrade libavahi-libevent1Upgrade libavahi-glib1Upgrade avahi-utils-gtkUpgrade avahi-compat-howl-develUpgrade libavahi-core7Upgrade libavahi-common3-32bitUpgrade libavahi-glib-develUpgrade libdns_sdUpgrade libavahi-client3-32bitUpgrade libhowl0Upgrade avahi-autoipdUpgrade avahi-compat-mDNSResponder-develUpgrade typelib-1_0-Avahi-0_6Upgrade avahi-lang | Aug 9, 2024 | May 1, 2017 |
| Ubuntu | — | Upgrade libavahi-core7Upgrade avahi-daemon | Feb 5, 2019 | Apr 30, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub