avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade avahi | Aug 22, 2024 | May 1, 2017 |
| Amazon Linux Ami 2 | — | Upgrade avahi-dnsconfdUpgrade avahi-qt4Upgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-qt3-develUpgrade avahi-debuginfoUpgrade avahi-develUpgrade avahi-compat-howl-develUpgrade avahi-uiUpgrade avahi-compat-libdns_sdUpgrade avahi-glib-develUpgrade avahi-autoipdUpgrade avahiUpgrade avahi-libsUpgrade avahi-gobject-develUpgrade avahi-qt4-develUpgrade avahi-compat-howlUpgrade avahi-compat-libdns_sd-develUpgrade avahi-toolsUpgrade avahi-ui-toolsUpgrade avahi-ui-develUpgrade avahi-ui-gtk3Upgrade avahi-qt3 | Oct 28, 2020 | May 1, 2017 |
| Centos_linux | — | Upgrade avahi-qt3-develUpgrade avahi-qt4Upgrade avahi-qt3Upgrade avahi-debuginfoUpgrade avahi-compat-howlUpgrade avahi-compat-libdns_sd-develUpgrade avahi-gobjectUpgrade avahi-glib-develUpgrade avahi-glibUpgrade avahi-libsUpgrade avahi-toolsUpgrade avahi-ui-develUpgrade avahi-gobject-develUpgrade avahi-ui-gtk3Upgrade avahi-qt4-develUpgrade avahi-develUpgrade avahiUpgrade avahi-compat-libdns_sdUpgrade avahi-dnsconfdUpgrade avahi-ui-toolsUpgrade avahi-uiUpgrade avahi-compat-howl-develUpgrade avahi-autoipd | Apr 1, 2020 | May 1, 2017 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | May 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade avahi-autoipdUpgrade avahiUpgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-ui-gtk3Upgrade avahi-libs | Jul 23, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade avahi-ui-gtk3Upgrade avahi-gobjectUpgrade avahi-libsUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-glib | Sep 25, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade avahi-libsUpgrade avahi-glibUpgrade avahi-gobjectUpgrade avahi-autoipdUpgrade avahiUpgrade avahi-ui-gtk3 | Sep 24, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade avahi-ui-gtk3Upgrade avahiUpgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahi-libsUpgrade python3-avahiUpgrade avahi-glib | Jun 27, 2019 | May 1, 2017 |
| Oracle_linux | — | Upgrade avahi-compat-libdns_sd-develUpgrade avahi-libsUpgrade avahi-glibUpgrade avahi-dnsconfdUpgrade avahi-qt3Upgrade avahi-compat-howlUpgrade avahi-compat-libdns_sdUpgrade avahi-gobject-develUpgrade avahi-qt4Upgrade avahi-glib-develUpgrade avahi-ui-develUpgrade avahi-gobjectUpgrade avahi-toolsUpgrade avahiUpgrade avahi-uiUpgrade avahi-ui-gtk3Upgrade avahi-ui-toolsUpgrade avahi-qt3-develUpgrade avahi-develUpgrade avahi-qt4-develUpgrade avahi-compat-howl-develUpgrade avahi-autoipd | Oct 5, 2022 | Mar 31, 2015 |
| Redhat_linux | — | Upgrade avahi-qt3Upgrade avahi-glib-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-qt3-develUpgrade avahi-libsUpgrade avahi-uiUpgrade avahi-qt4Upgrade avahi-ui-develUpgrade avahi-dnsconfdUpgrade avahi-compat-howlUpgrade avahi-toolsUpgrade avahi-gobject-develUpgrade avahi-debuginfoUpgrade avahi-compat-libdns_sdUpgrade avahiNo solution existsUpgrade avahi-ui-gtk3Upgrade avahi-autoipdUpgrade avahi-develUpgrade avahi-ui-toolsUpgrade avahi-compat-howl-develUpgrade avahi-gobjectUpgrade avahi-qt4-develUpgrade avahi-glib | Apr 1, 2020 | May 1, 2017 |
| Suse | — | Upgrade avahi-autoipdUpgrade libdns_sdUpgrade libavahi-client3-32bitUpgrade libavahi-glib-develUpgrade avahi-langUpgrade typelib-1_0-avahi-0_6Upgrade libhowl0Upgrade avahi-compat-howl-develUpgrade libavahi-glib1Upgrade libavahi-client3Upgrade libavahi-develUpgrade libavahi-libevent1Upgrade avahi-compat-mdnsresponder-develUpgrade libavahi-gobject-develUpgrade libavahi-gobject0Upgrade libavahi-core7Upgrade avahi-utilsUpgrade avahiUpgrade libavahi-common3Upgrade avahi-utils-gtkUpgrade libavahi-ui-gtk3-0Upgrade libavahi-common3-32bit | Aug 9, 2024 | May 1, 2017 |
| Ubuntu | — | Upgrade libavahi-core7Upgrade avahi-daemon | Feb 5, 2019 | Apr 30, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub