avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade avahi | Aug 22, 2024 | May 1, 2017 |
| Amazon Linux Ami 2 | — | Upgrade avahi-qt4-develUpgrade avahi-ui-develUpgrade avahi-toolsUpgrade avahi-ui-gtk3Upgrade avahi-qt3Upgrade avahi-compat-howlUpgrade avahi-compat-libdns_sd-develUpgrade avahiUpgrade avahi-libsUpgrade avahi-gobject-develUpgrade avahi-ui-toolsUpgrade avahi-develUpgrade avahi-debuginfoUpgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-dnsconfdUpgrade avahi-compat-libdns_sdUpgrade avahi-qt3-develUpgrade avahi-uiUpgrade avahi-compat-howl-develUpgrade avahi-glib-develUpgrade avahi-autoipdUpgrade avahi-qt4 | Oct 28, 2020 | May 1, 2017 |
| Centos_linux | — | Upgrade avahi-ui-toolsUpgrade avahi-qt4-develUpgrade avahi-autoipdUpgrade avahi-uiUpgrade avahi-dnsconfdUpgrade avahi-develUpgrade avahi-compat-howl-develUpgrade avahi-ui-gtk3Upgrade avahi-compat-libdns_sdUpgrade avahiUpgrade avahi-ui-develUpgrade avahi-qt3Upgrade avahi-qt4Upgrade avahi-debuginfoUpgrade avahi-qt3-develUpgrade avahi-toolsUpgrade avahi-compat-howlUpgrade avahi-libsUpgrade avahi-gobject-develUpgrade avahi-glibUpgrade avahi-glib-develUpgrade avahi-gobjectUpgrade avahi-compat-libdns_sd-devel | Apr 1, 2020 | May 1, 2017 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | May 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade avahi-libsUpgrade avahiUpgrade avahi-ui-gtk3Upgrade avahi-glibUpgrade avahi-autoipdUpgrade avahi-gobject | Jul 23, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade avahi-gobjectUpgrade avahi-ui-gtk3Upgrade avahi-autoipdUpgrade avahi-libsUpgrade avahiUpgrade avahi-glib | Sep 25, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade avahi-libsUpgrade avahi-glibUpgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahiUpgrade avahi-ui-gtk3 | Sep 24, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade avahi-libsUpgrade avahi-glibUpgrade python3-avahiUpgrade avahi-ui-gtk3Upgrade avahi-gobjectUpgrade avahiUpgrade avahi-autoipd | Jun 27, 2019 | May 1, 2017 |
| Oracle_linux | — | Upgrade avahi-toolsUpgrade avahi-qt4Upgrade avahi-libsUpgrade avahi-ui-develUpgrade avahi-gobject-develUpgrade avahi-glibUpgrade avahi-compat-howlUpgrade avahi-compat-libdns_sd-develUpgrade avahi-dnsconfdUpgrade avahi-qt3Upgrade avahi-glib-develUpgrade avahi-gobjectUpgrade avahi-compat-libdns_sdUpgrade avahi-qt3-develUpgrade avahi-ui-gtk3Upgrade avahi-compat-howl-develUpgrade avahi-develUpgrade avahiUpgrade avahi-uiUpgrade avahi-ui-toolsUpgrade avahi-qt4-develUpgrade avahi-autoipd | Oct 5, 2022 | Mar 31, 2015 |
| Redhat_linux | — | Upgrade avahi-libsUpgrade avahi-gobject-develUpgrade avahi-qt3Upgrade avahi-qt4Upgrade avahi-uiUpgrade avahi-compat-libdns_sd-develUpgrade avahi-glib-develUpgrade avahi-qt3-develUpgrade avahi-dnsconfdUpgrade avahi-compat-howlUpgrade avahi-ui-develUpgrade avahi-debuginfoUpgrade avahi-toolsUpgrade avahi-ui-gtk3Upgrade avahi-develNo solution existsUpgrade avahi-glibUpgrade avahi-compat-libdns_sdUpgrade avahi-ui-toolsUpgrade avahi-autoipdUpgrade avahi-qt4-develUpgrade avahiUpgrade avahi-compat-howl-develUpgrade avahi-gobject | Apr 1, 2020 | May 1, 2017 |
| Suse | — | Upgrade libavahi-develUpgrade libavahi-libevent1Upgrade libavahi-glib1Upgrade libavahi-common3Upgrade avahiUpgrade libavahi-gobject-develUpgrade avahi-utilsUpgrade avahi-compat-howl-develUpgrade libavahi-common3-32bitUpgrade avahi-compat-mdnsresponder-develUpgrade libavahi-core7Upgrade libavahi-gobject0Upgrade libavahi-ui-gtk3-0Upgrade libavahi-client3Upgrade avahi-utils-gtkUpgrade libavahi-client3-32bitUpgrade libhowl0Upgrade typelib-1_0-avahi-0_6Upgrade avahi-autoipdUpgrade libdns_sdUpgrade libavahi-glib-develUpgrade avahi-lang | Aug 9, 2024 | May 1, 2017 |
| Ubuntu | — | Upgrade avahi-daemonUpgrade libavahi-core7 | Feb 5, 2019 | Apr 30, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub