avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade avahi | Aug 22, 2024 | May 1, 2017 |
| Amazon Linux Ami 2 | — | Upgrade avahi-uiUpgrade avahi-qt3-develUpgrade avahi-debuginfoUpgrade avahi-compat-howl-develUpgrade avahi-gobjectUpgrade avahi-glib-develUpgrade avahi-autoipdUpgrade avahi-glibUpgrade avahi-dnsconfdUpgrade avahi-develUpgrade avahi-qt4Upgrade avahi-compat-libdns_sdUpgrade avahi-ui-toolsUpgrade avahi-ui-gtk3Upgrade avahi-gobject-develUpgrade avahi-qt4-develUpgrade avahi-toolsUpgrade avahi-compat-libdns_sd-develUpgrade avahi-ui-develUpgrade avahi-compat-howlUpgrade avahi-qt3Upgrade avahiUpgrade avahi-libs | Oct 28, 2020 | May 1, 2017 |
| Centos_linux | — | Upgrade avahi-develUpgrade avahiUpgrade avahi-qt4-develUpgrade avahi-compat-howl-develUpgrade avahi-uiUpgrade avahi-compat-libdns_sdUpgrade avahi-ui-gtk3Upgrade avahi-ui-toolsUpgrade avahi-dnsconfdUpgrade avahi-autoipdUpgrade avahi-glib-develUpgrade avahi-ui-develUpgrade avahi-compat-howlUpgrade avahi-debuginfoUpgrade avahi-qt3Upgrade avahi-qt3-develUpgrade avahi-qt4Upgrade avahi-gobjectUpgrade avahi-toolsUpgrade avahi-glibUpgrade avahi-libsUpgrade avahi-compat-libdns_sd-develUpgrade avahi-gobject-devel | Apr 1, 2020 | May 1, 2017 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | May 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade avahi-glibUpgrade avahi-gobjectUpgrade avahi-autoipdUpgrade avahiUpgrade avahi-ui-gtk3Upgrade avahi-libs | Jul 23, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-autoipdUpgrade avahiUpgrade avahi-libsUpgrade avahi-ui-gtk3 | Sep 25, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade avahi-gobjectUpgrade avahi-libsUpgrade avahi-autoipdUpgrade avahi-glibUpgrade avahiUpgrade avahi-ui-gtk3 | Sep 24, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahi-glibUpgrade python3-avahiUpgrade avahi-libs | Jun 27, 2019 | May 1, 2017 |
| Oracle_linux | — | Upgrade avahi-develUpgrade avahi-compat-howl-develUpgrade avahi-ui-gtk3Upgrade avahi-uiUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-qt4-develUpgrade avahi-ui-toolsUpgrade avahi-qt3-develUpgrade avahi-glib-develUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-howlUpgrade avahi-qt3Upgrade avahi-qt4Upgrade avahi-gobject-develUpgrade avahi-libsUpgrade avahi-dnsconfdUpgrade avahi-ui-develUpgrade avahi-glibUpgrade avahi-gobjectUpgrade avahi-tools | Oct 5, 2022 | Mar 31, 2015 |
| Redhat_linux | — | Upgrade avahi-glibUpgrade avahi-compat-howl-develUpgrade avahi-ui-toolsNo solution existsUpgrade avahi-develUpgrade avahi-compat-libdns_sdUpgrade avahi-qt4-develUpgrade avahiUpgrade avahi-gobjectUpgrade avahi-autoipdUpgrade avahi-ui-gtk3Upgrade avahi-gobject-develUpgrade avahi-debuginfoUpgrade avahi-compat-howlUpgrade avahi-glib-develUpgrade avahi-toolsUpgrade avahi-uiUpgrade avahi-qt3Upgrade avahi-compat-libdns_sd-develUpgrade avahi-qt3-develUpgrade avahi-ui-develUpgrade avahi-dnsconfdUpgrade avahi-qt4Upgrade avahi-libs | Apr 1, 2020 | May 1, 2017 |
| Suse | — | Upgrade libavahi-client3-32bitUpgrade libhowl0Upgrade typelib-1_0-Avahi-0_6Upgrade avahi-autoipdUpgrade avahi-compat-mDNSResponder-develUpgrade libdns_sdUpgrade libavahi-glib-develUpgrade avahi-langUpgrade libavahi-develUpgrade libavahi-common3-32bitUpgrade libavahi-core7Upgrade libavahi-common3Upgrade avahi-utils-gtkUpgrade libavahi-glib1Upgrade libavahi-gobject-develUpgrade libavahi-gobject0Upgrade libavahi-libevent1Upgrade avahiUpgrade avahi-utilsUpgrade libavahi-ui-gtk3-0Upgrade avahi-compat-howl-develUpgrade libavahi-client3 | Aug 9, 2024 | May 1, 2017 |
| Ubuntu | — | Upgrade libavahi-core7Upgrade avahi-daemon | Feb 5, 2019 | Apr 30, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub