avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade avahi | Aug 22, 2024 | May 1, 2017 |
| Amazon Linux Ami 2 | — | Upgrade avahi-libsUpgrade avahi-qt4-develUpgrade avahiUpgrade avahi-ui-develUpgrade avahi-compat-howlUpgrade avahi-ui-toolsUpgrade avahi-gobject-develUpgrade avahi-qt3Upgrade avahi-toolsUpgrade avahi-ui-gtk3Upgrade avahi-compat-libdns_sd-develUpgrade avahi-uiUpgrade avahi-glib-develUpgrade avahi-develUpgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-dnsconfdUpgrade avahi-compat-libdns_sdUpgrade avahi-debuginfoUpgrade avahi-qt3-develUpgrade avahi-compat-howl-develUpgrade avahi-autoipdUpgrade avahi-qt4 | Oct 28, 2020 | May 1, 2017 |
| Centos_linux | — | Upgrade avahi-qt4-develUpgrade avahi-ui-gtk3Upgrade avahi-dnsconfdUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-compat-howl-develUpgrade avahi-ui-toolsUpgrade avahi-develUpgrade avahi-compat-libdns_sdUpgrade avahi-uiUpgrade avahi-libsUpgrade avahi-toolsUpgrade avahi-debuginfoUpgrade avahi-qt3-develUpgrade avahi-qt4Upgrade avahi-gobjectUpgrade avahi-compat-howlUpgrade avahi-ui-develUpgrade avahi-qt3Upgrade avahi-gobject-develUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-glib | Apr 1, 2020 | May 1, 2017 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | May 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade avahi-libsUpgrade avahi-glibUpgrade avahi-gobjectUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-ui-gtk3 | Jul 23, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade avahiUpgrade avahi-ui-gtk3Upgrade avahi-glibUpgrade avahi-libsUpgrade avahi-autoipdUpgrade avahi-gobject | Sep 25, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade avahi-autoipdUpgrade avahi-libsUpgrade avahi-gobjectUpgrade avahi-glibUpgrade avahiUpgrade avahi-ui-gtk3 | Sep 24, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade avahi-libsUpgrade avahi-glibUpgrade python3-avahiUpgrade avahi-autoipdUpgrade avahiUpgrade avahi-ui-gtk3Upgrade avahi-gobject | Jun 27, 2019 | May 1, 2017 |
| Oracle_linux | — | Upgrade avahi-uiUpgrade avahi-ui-toolsUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-develUpgrade avahi-qt4-develUpgrade avahi-compat-howl-develUpgrade avahi-ui-gtk3Upgrade avahi-qt3-develUpgrade avahi-qt3Upgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-howlUpgrade avahi-ui-develUpgrade avahi-compat-libdns_sdUpgrade avahi-libsUpgrade avahi-gobject-develUpgrade avahi-dnsconfdUpgrade avahi-glibUpgrade avahi-qt4Upgrade avahi-gobjectUpgrade avahi-glib-develUpgrade avahi-tools | Oct 5, 2022 | Mar 31, 2015 |
| Redhat_linux | — | Upgrade avahi-qt4Upgrade avahi-compat-howlUpgrade avahi-qt3-develUpgrade avahi-debuginfoUpgrade avahi-gobject-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-libsUpgrade avahi-qt3Upgrade avahi-glib-develUpgrade avahi-dnsconfdUpgrade avahi-toolsUpgrade avahi-ui-develUpgrade avahi-uiUpgrade avahi-ui-toolsNo solution existsUpgrade avahi-ui-gtk3Upgrade avahi-autoipdUpgrade avahi-compat-libdns_sdUpgrade avahi-glibUpgrade avahiUpgrade avahi-gobjectUpgrade avahi-compat-howl-develUpgrade avahi-develUpgrade avahi-qt4-devel | Apr 1, 2020 | May 1, 2017 |
| Suse | — | Upgrade libavahi-develUpgrade libavahi-gobject0Upgrade libavahi-core7Upgrade libavahi-ui-gtk3-0Upgrade libavahi-client3Upgrade avahi-utilsUpgrade libavahi-gobject-develUpgrade libavahi-libevent1Upgrade avahi-utils-gtkUpgrade libavahi-common3-32bitUpgrade avahiUpgrade libavahi-common3Upgrade avahi-compat-howl-develUpgrade libavahi-glib1Upgrade libdns_sdUpgrade avahi-langUpgrade typelib-1_0-Avahi-0_6Upgrade libhowl0Upgrade avahi-compat-mDNSResponder-develUpgrade libavahi-client3-32bitUpgrade avahi-autoipdUpgrade libavahi-glib-devel | Aug 9, 2024 | May 1, 2017 |
| Ubuntu | — | Upgrade avahi-daemonUpgrade libavahi-core7 | Feb 5, 2019 | Apr 30, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub