avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade avahi | Aug 22, 2024 | May 1, 2017 |
| Amazon Linux Ami 2 | — | Upgrade avahi-compat-libdns_sdUpgrade avahi-compat-howl-develUpgrade avahi-glib-develUpgrade avahi-qt3-develUpgrade avahi-glibUpgrade avahi-debuginfoUpgrade avahi-dnsconfdUpgrade avahi-qt4Upgrade avahi-uiUpgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahi-develUpgrade avahi-libsUpgrade avahi-compat-howlUpgrade avahiUpgrade avahi-ui-develUpgrade avahi-ui-toolsUpgrade avahi-gobject-develUpgrade avahi-toolsUpgrade avahi-qt4-develUpgrade avahi-ui-gtk3Upgrade avahi-qt3Upgrade avahi-compat-libdns_sd-devel | Oct 28, 2020 | May 1, 2017 |
| Centos_linux | — | Upgrade avahi-develUpgrade avahi-uiUpgrade avahi-compat-howl-develUpgrade avahi-ui-gtk3Upgrade avahi-qt4-develUpgrade avahiUpgrade avahi-dnsconfdUpgrade avahi-compat-libdns_sdUpgrade avahi-autoipdUpgrade avahi-ui-toolsUpgrade avahi-toolsUpgrade avahi-glibUpgrade avahi-qt3-develUpgrade avahi-gobjectUpgrade avahi-glib-develUpgrade avahi-libsUpgrade avahi-qt3Upgrade avahi-gobject-develUpgrade avahi-debuginfoUpgrade avahi-ui-develUpgrade avahi-compat-howlUpgrade avahi-compat-libdns_sd-develUpgrade avahi-qt4 | Apr 1, 2020 | May 1, 2017 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | May 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade avahi-libsUpgrade avahi-autoipdUpgrade avahiUpgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-ui-gtk3 | Jul 23, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade avahi-glibUpgrade avahi-gobjectUpgrade avahi-libsUpgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-autoipd | Sep 25, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade avahi-libsUpgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-autoipdUpgrade avahi-ui-gtk3Upgrade avahi | Sep 24, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-gobjectUpgrade avahi-autoipdUpgrade python3-avahiUpgrade avahi-glibUpgrade avahi-libs | Jun 27, 2019 | May 1, 2017 |
| Oracle_linux | — | Upgrade avahi-uiUpgrade avahi-develUpgrade avahiUpgrade avahi-qt3-develUpgrade avahi-autoipdUpgrade avahi-qt4-develUpgrade avahi-ui-gtk3Upgrade avahi-ui-toolsUpgrade avahi-compat-howl-develUpgrade avahi-gobjectUpgrade avahi-glib-develUpgrade avahi-qt4Upgrade avahi-toolsUpgrade avahi-glibUpgrade avahi-gobject-develUpgrade avahi-dnsconfdUpgrade avahi-libsUpgrade avahi-ui-develUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-howlUpgrade avahi-qt3Upgrade avahi-compat-libdns_sd-devel | Oct 5, 2022 | Mar 31, 2015 |
| Redhat_linux | — | Upgrade avahi-gobjectUpgrade avahi-autoipdUpgrade avahi-qt4-develUpgrade avahi-compat-howl-develUpgrade avahi-ui-gtk3Upgrade avahi-ui-toolsNo solution existsUpgrade avahiUpgrade avahi-develUpgrade avahi-glibUpgrade avahi-compat-libdns_sdUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-uiUpgrade avahi-ui-develUpgrade avahi-dnsconfdUpgrade avahi-qt3-develUpgrade avahi-debuginfoUpgrade avahi-qt3Upgrade avahi-gobject-develUpgrade avahi-toolsUpgrade avahi-libsUpgrade avahi-compat-howlUpgrade avahi-qt4 | Apr 1, 2020 | May 1, 2017 |
| Suse | — | Upgrade libhowl0Upgrade avahi-autoipdUpgrade typelib-1_0-Avahi-0_6Upgrade avahi-compat-mDNSResponder-develUpgrade libavahi-client3-32bitUpgrade libavahi-glib-develUpgrade avahi-langUpgrade libdns_sdUpgrade libavahi-ui-gtk3-0Upgrade libavahi-gobject-develUpgrade libavahi-client3Upgrade libavahi-gobject0Upgrade libavahi-common3-32bitUpgrade libavahi-libevent1Upgrade avahi-compat-howl-develUpgrade avahiUpgrade libavahi-develUpgrade libavahi-glib1Upgrade libavahi-common3Upgrade avahi-utilsUpgrade libavahi-core7Upgrade avahi-utils-gtk | Aug 9, 2024 | May 1, 2017 |
| Ubuntu | — | Upgrade avahi-daemonUpgrade libavahi-core7 | Feb 5, 2019 | Apr 30, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub