avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade avahi | Aug 22, 2024 | May 1, 2017 |
| Amazon Linux Ami 2 | — | Upgrade avahi-gobjectUpgrade avahi-uiUpgrade avahi-glibUpgrade avahi-develUpgrade avahi-compat-howl-develUpgrade avahi-compat-libdns_sdUpgrade avahi-qt3-develUpgrade avahi-debuginfoUpgrade avahi-autoipdUpgrade avahi-qt4Upgrade avahi-glib-develUpgrade avahi-dnsconfdUpgrade avahi-ui-develUpgrade avahi-qt3Upgrade avahi-compat-libdns_sd-develUpgrade avahiUpgrade avahi-ui-toolsUpgrade avahi-gobject-develUpgrade avahi-qt4-develUpgrade avahi-libsUpgrade avahi-ui-gtk3Upgrade avahi-toolsUpgrade avahi-compat-howl | Oct 28, 2020 | May 1, 2017 |
| Centos_linux | — | Upgrade avahi-compat-howlUpgrade avahi-libsUpgrade avahi-ui-develUpgrade avahi-glibUpgrade avahi-qt4Upgrade avahi-qt3Upgrade avahi-gobjectUpgrade avahi-toolsUpgrade avahi-compat-libdns_sd-develUpgrade avahi-debuginfoUpgrade avahi-qt3-develUpgrade avahi-gobject-develUpgrade avahi-glib-develUpgrade avahiUpgrade avahi-develUpgrade avahi-dnsconfdUpgrade avahi-ui-gtk3Upgrade avahi-autoipdUpgrade avahi-ui-toolsUpgrade avahi-compat-libdns_sdUpgrade avahi-uiUpgrade avahi-compat-howl-develUpgrade avahi-qt4-devel | Apr 1, 2020 | May 1, 2017 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | May 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade avahi-libsUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-glibUpgrade avahi-ui-gtk3Upgrade avahi-gobject | Jul 23, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-gobjectUpgrade avahi-autoipdUpgrade avahi-libsUpgrade avahi-glib | Sep 25, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade avahi-libsUpgrade avahi-gobjectUpgrade avahi-autoipdUpgrade avahi-glibUpgrade avahi-ui-gtk3Upgrade avahi | Sep 24, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-avahiUpgrade avahi-glibUpgrade avahi-libsUpgrade avahi-gobjectUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-ui-gtk3 | Jun 27, 2019 | May 1, 2017 |
| Oracle_linux | — | Upgrade avahi-develUpgrade avahi-autoipdUpgrade avahi-qt4-develUpgrade avahiUpgrade avahi-qt3-develUpgrade avahi-ui-toolsUpgrade avahi-ui-gtk3Upgrade avahi-compat-howl-develUpgrade avahi-uiUpgrade avahi-ui-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-toolsUpgrade avahi-qt3Upgrade avahi-gobjectUpgrade avahi-compat-howlUpgrade avahi-compat-libdns_sdUpgrade avahi-glib-develUpgrade avahi-libsUpgrade avahi-dnsconfdUpgrade avahi-gobject-develUpgrade avahi-qt4Upgrade avahi-glib | Oct 5, 2022 | Mar 31, 2015 |
| Redhat_linux | — | Upgrade avahi-qt4-develUpgrade avahi-ui-gtk3Upgrade avahi-glibUpgrade avahi-gobjectUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-compat-libdns_sdNo solution existsUpgrade avahi-develUpgrade avahi-ui-toolsUpgrade avahi-compat-howl-develUpgrade avahi-qt3-develUpgrade avahi-dnsconfdUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-howlUpgrade avahi-libsUpgrade avahi-qt3Upgrade avahi-uiUpgrade avahi-gobject-develUpgrade avahi-qt4Upgrade avahi-ui-develUpgrade avahi-debuginfoUpgrade avahi-toolsUpgrade avahi-glib-devel | Apr 1, 2020 | May 1, 2017 |
| Suse | — | Upgrade libavahi-ui-gtk3-0Upgrade libavahi-client3Upgrade avahiUpgrade libavahi-gobject0Upgrade libavahi-gobject-develUpgrade libavahi-common3Upgrade avahi-utilsUpgrade libavahi-develUpgrade libavahi-libevent1Upgrade libavahi-glib1Upgrade avahi-utils-gtkUpgrade avahi-compat-howl-develUpgrade libavahi-core7Upgrade libavahi-common3-32bitUpgrade libavahi-glib-develUpgrade libdns_sdUpgrade libavahi-client3-32bitUpgrade libhowl0Upgrade avahi-autoipdUpgrade avahi-compat-mDNSResponder-develUpgrade typelib-1_0-Avahi-0_6Upgrade avahi-lang | Aug 9, 2024 | May 1, 2017 |
| Ubuntu | — | Upgrade libavahi-core7Upgrade avahi-daemon | Feb 5, 2019 | Apr 30, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub