avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade avahi | Aug 22, 2024 | May 1, 2017 |
| Amazon Linux Ami 2 | — | Upgrade avahi-toolsUpgrade avahi-compat-howlUpgrade avahi-compat-libdns_sd-develUpgrade avahi-ui-develUpgrade avahi-ui-toolsUpgrade avahiUpgrade avahi-qt3Upgrade avahi-ui-gtk3Upgrade avahi-qt4-develUpgrade avahi-gobject-develUpgrade avahi-libsUpgrade avahi-dnsconfdUpgrade avahi-uiUpgrade avahi-qt4Upgrade avahi-autoipdUpgrade avahi-glibUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sdUpgrade avahi-debuginfoUpgrade avahi-develUpgrade avahi-gobjectUpgrade avahi-compat-howl-develUpgrade avahi-qt3-devel | Oct 28, 2020 | May 1, 2017 |
| Centos_linux | — | Upgrade avahi-qt4-develUpgrade avahi-ui-gtk3Upgrade avahi-autoipdUpgrade avahi-uiUpgrade avahi-ui-toolsUpgrade avahi-compat-howl-develUpgrade avahi-develUpgrade avahi-compat-libdns_sdUpgrade avahi-dnsconfdUpgrade avahiUpgrade avahi-libsUpgrade avahi-glibUpgrade avahi-qt3-develUpgrade avahi-qt3Upgrade avahi-glib-develUpgrade avahi-gobjectUpgrade avahi-gobject-develUpgrade avahi-qt4Upgrade avahi-compat-libdns_sd-develUpgrade avahi-ui-develUpgrade avahi-compat-howlUpgrade avahi-debuginfoUpgrade avahi-tools | Apr 1, 2020 | May 1, 2017 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | May 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade avahi-autoipdUpgrade avahi-ui-gtk3Upgrade avahi-glibUpgrade avahi-gobjectUpgrade avahiUpgrade avahi-libs | Jul 23, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade avahi-gobjectUpgrade avahi-ui-gtk3Upgrade avahi-autoipdUpgrade avahiUpgrade avahi-glibUpgrade avahi-libs | Sep 25, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade avahi-libsUpgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahi-glibUpgrade avahiUpgrade avahi-ui-gtk3 | Sep 24, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade avahi-libsUpgrade avahi-glibUpgrade python3-avahiUpgrade avahi-gobjectUpgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-autoipd | Jun 27, 2019 | May 1, 2017 |
| Oracle_linux | — | Upgrade avahi-toolsUpgrade avahi-gobjectUpgrade avahi-ui-develUpgrade avahi-glib-develUpgrade avahi-qt3Upgrade avahi-libsUpgrade avahi-glibUpgrade avahi-compat-howlUpgrade avahi-dnsconfdUpgrade avahi-compat-libdns_sd-develUpgrade avahi-gobject-develUpgrade avahi-compat-libdns_sdUpgrade avahi-qt4Upgrade avahi-develUpgrade avahi-ui-toolsUpgrade avahi-autoipdUpgrade avahi-ui-gtk3Upgrade avahi-qt4-develUpgrade avahiUpgrade avahi-uiUpgrade avahi-qt3-develUpgrade avahi-compat-howl-devel | Oct 5, 2022 | Mar 31, 2015 |
| Redhat_linux | — | Upgrade avahi-qt4-develUpgrade avahi-develUpgrade avahi-compat-libdns_sdUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-compat-howl-develUpgrade avahi-ui-gtk3Upgrade avahi-glibNo solution existsUpgrade avahi-libsUpgrade avahi-ui-develUpgrade avahi-gobject-develUpgrade avahi-qt3-develUpgrade avahi-toolsUpgrade avahi-glib-develUpgrade avahi-compat-howlUpgrade avahi-dnsconfdUpgrade avahi-uiUpgrade avahi-compat-libdns_sd-develUpgrade avahi-debuginfoUpgrade avahi-qt4Upgrade avahi-qt3Upgrade avahi-gobjectUpgrade avahi-ui-tools | Apr 1, 2020 | May 1, 2017 |
| Suse | — | Upgrade libavahi-core7Upgrade libavahi-libevent1Upgrade libavahi-gobject-develUpgrade libavahi-gobject0Upgrade libavahi-develUpgrade avahi-utils-gtkUpgrade avahiUpgrade libavahi-ui-gtk3-0Upgrade libavahi-client3Upgrade avahi-utilsUpgrade libavahi-common3-32bitUpgrade libavahi-glib1Upgrade libavahi-common3Upgrade avahi-compat-howl-develUpgrade libavahi-client3-32bitUpgrade libavahi-glib-develUpgrade libdns_sdUpgrade avahi-langUpgrade avahi-compat-mDNSResponder-develUpgrade libhowl0Upgrade avahi-autoipdUpgrade typelib-1_0-Avahi-0_6 | Aug 9, 2024 | May 1, 2017 |
| Ubuntu | — | Upgrade avahi-daemonUpgrade libavahi-core7 | Feb 5, 2019 | Apr 30, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub