avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade avahi | Aug 22, 2024 | May 1, 2017 |
| Amazon Linux Ami 2 | — | Upgrade avahi-develUpgrade avahi-glib-develUpgrade avahi-debuginfoUpgrade avahi-glibUpgrade avahi-gobjectUpgrade avahi-compat-howl-develUpgrade avahi-autoipdUpgrade avahi-qt3-develUpgrade avahi-compat-libdns_sdUpgrade avahi-qt4Upgrade avahi-dnsconfdUpgrade avahi-uiUpgrade avahi-libsUpgrade avahi-gobject-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-ui-gtk3Upgrade avahi-ui-develUpgrade avahi-ui-toolsUpgrade avahi-qt4-develUpgrade avahiUpgrade avahi-qt3Upgrade avahi-toolsUpgrade avahi-compat-howl | Oct 28, 2020 | May 1, 2017 |
| Centos_linux | — | Upgrade avahi-libsUpgrade avahi-gobject-develUpgrade avahi-glibUpgrade avahi-glib-develUpgrade avahi-qt4Upgrade avahi-toolsUpgrade avahi-qt3Upgrade avahi-ui-develUpgrade avahi-qt3-develUpgrade avahi-gobjectUpgrade avahi-compat-howlUpgrade avahi-compat-libdns_sd-develUpgrade avahi-debuginfoUpgrade avahi-uiUpgrade avahi-develUpgrade avahiUpgrade avahi-qt4-develUpgrade avahi-dnsconfdUpgrade avahi-compat-howl-develUpgrade avahi-ui-gtk3Upgrade avahi-ui-toolsUpgrade avahi-autoipdUpgrade avahi-compat-libdns_sd | Apr 1, 2020 | May 1, 2017 |
| Debian | — | Upgrade avahi | Jul 30, 2024 | May 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade avahi-libsUpgrade avahi-glibUpgrade avahi-ui-gtk3Upgrade avahi-autoipdUpgrade avahi-gobjectUpgrade avahi | Jul 23, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade avahi-ui-gtk3Upgrade avahi-glibUpgrade avahiUpgrade avahi-libsUpgrade avahi-autoipdUpgrade avahi-gobject | Sep 25, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade avahi-libsUpgrade avahi-gobjectUpgrade avahi-glibUpgrade avahi-autoipdUpgrade avahi-ui-gtk3Upgrade avahi | Sep 24, 2019 | May 1, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade avahi-ui-gtk3Upgrade avahi-autoipdUpgrade avahiUpgrade avahi-gobjectUpgrade python3-avahiUpgrade avahi-libsUpgrade avahi-glib | Jun 27, 2019 | May 1, 2017 |
| Oracle_linux | — | Upgrade avahi-compat-howlUpgrade avahi-qt3Upgrade avahi-libsUpgrade avahi-glibUpgrade avahi-compat-libdns_sd-develUpgrade avahi-compat-libdns_sdUpgrade avahi-ui-develUpgrade avahi-dnsconfdUpgrade avahi-qt4Upgrade avahi-gobject-develUpgrade avahi-glib-develUpgrade avahi-gobjectUpgrade avahi-toolsUpgrade avahi-ui-gtk3Upgrade avahi-qt3-develUpgrade avahi-uiUpgrade avahiUpgrade avahi-autoipdUpgrade avahi-ui-toolsUpgrade avahi-qt4-develUpgrade avahi-compat-howl-develUpgrade avahi-devel | Oct 5, 2022 | Mar 31, 2015 |
| Redhat_linux | — | Upgrade avahi-compat-libdns_sdUpgrade avahi-gobjectUpgrade avahi-qt4-develNo solution existsUpgrade avahi-develUpgrade avahi-ui-toolsUpgrade avahi-ui-gtk3Upgrade avahi-glibUpgrade avahiUpgrade avahi-compat-howl-develUpgrade avahi-autoipdUpgrade avahi-uiUpgrade avahi-qt3Upgrade avahi-compat-libdns_sd-develUpgrade avahi-gobject-develUpgrade avahi-qt4Upgrade avahi-compat-howlUpgrade avahi-ui-develUpgrade avahi-toolsUpgrade avahi-qt3-develUpgrade avahi-dnsconfdUpgrade avahi-libsUpgrade avahi-debuginfoUpgrade avahi-glib-devel | Apr 1, 2020 | May 1, 2017 |
| Suse | — | Upgrade avahi-utils-gtkUpgrade libavahi-common3Upgrade libavahi-gobject-develUpgrade avahiUpgrade libavahi-libevent1Upgrade libavahi-ui-gtk3-0Upgrade libavahi-gobject0Upgrade libavahi-client3Upgrade libavahi-glib1Upgrade avahi-compat-howl-develUpgrade libavahi-core7Upgrade libavahi-common3-32bitUpgrade avahi-compat-mdnsresponder-develUpgrade avahi-utilsUpgrade libavahi-develUpgrade libavahi-glib-develUpgrade typelib-1_0-avahi-0_6Upgrade libhowl0Upgrade libavahi-client3-32bitUpgrade libdns_sdUpgrade avahi-autoipdUpgrade avahi-lang | Aug 9, 2024 | May 1, 2017 |
| Ubuntu | — | Upgrade libavahi-core7Upgrade avahi-daemon | Feb 5, 2019 | Apr 30, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub