A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade avahi | Aug 8, 2025 | Nov 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade avahi-uiUpgrade avahi-ui-gtk3Upgrade avahi-ui-toolsUpgrade avahi-gobject-develUpgrade avahiUpgrade avahi-qt4-develUpgrade avahi-glibUpgrade avahi-dnsconfdUpgrade avahi-compat-howlUpgrade avahi-qt3Upgrade avahi-develUpgrade avahi-compat-howl-develUpgrade avahi-ui-develUpgrade avahi-compat-libdns_sdUpgrade avahi-autoipdUpgrade avahi-toolsUpgrade avahi-gobjectUpgrade avahi-qt3-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-debuginfoUpgrade avahi-libsUpgrade avahi-glib-develUpgrade avahi-qt4 | Dec 20, 2024 | Nov 21, 2024 |
| Amazon_linux_2023 | — | Upgrade avahi-autoipd-debuginfoUpgrade avahi-develUpgrade avahi-dnsconfdUpgrade avahi-compat-howl-develUpgrade avahi-glibUpgrade avahi-glib-develUpgrade avahi-debuginfoUpgrade avahi-compat-libdns_sdUpgrade avahi-glib-debuginfoUpgrade avahi-libs-debuginfoUpgrade avahi-gobjectUpgrade avahi-debugsourceUpgrade avahi-compat-howl-debuginfoUpgrade avahi-gobject-debuginfoUpgrade avahi-autoipdUpgrade avahi-ui-develUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-tools-debuginfoUpgrade avahi-gobject-develUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-compat-libdns_sd-develUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-toolsUpgrade avahi-compat-howlUpgrade avahi-libsUpgrade avahiUpgrade avahi-ui-gtk3 | Feb 17, 2025 | Nov 15, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Nov 21, 2024 |
| Dell Powerstore Dsa2026115 | — | Upgrade Dell PowerStoreOS to the latest version | Feb 25, 2026 | Feb 24, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade avahi-libs | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade avahi-libs | Dec 12, 2025 | Dec 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade avahi-libs | Jan 15, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade avahi-libs | Dec 12, 2025 | Dec 11, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Dec 15, 2025 |
| Oracle_linux | — | Upgrade avahi-libsUpgrade avahi-toolsUpgrade avahi-compat-howl-develUpgrade avahi-compat-libdns_sd-develUpgrade avahi-glib-develUpgrade avahi-develUpgrade avahi-autoipdUpgrade avahi-glibUpgrade avahi-gobject-develUpgrade avahiUpgrade avahi-compat-howlUpgrade avahi-compat-libdns_sdUpgrade avahi-gobject | Jul 22, 2025 | Nov 15, 2024 |
| Redhat_linux | — | Upgrade avahi-toolsUpgrade avahi-autoipd-debuginfoUpgrade avahi-glib-develUpgrade avahi-compat-howlUpgrade avahi-ui-tools-debuginfoUpgrade avahi-develUpgrade avahi-debuginfoUpgrade avahi-compat-howl-develUpgrade avahi-libsUpgrade avahi-libs-debuginfoUpgrade avahi-autoipdNo solution existsUpgrade avahi-tools-debuginfoUpgrade avahi-glib-debuginfoUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-dnsconfd-debuginfoUpgrade avahi-gobject-develUpgrade avahi-ui-debuginfoUpgrade avahiUpgrade avahi-compat-howl-debuginfoUpgrade avahi-compat-libdns_sdUpgrade avahi-glibUpgrade avahi-compat-libdns_sd-develUpgrade avahi-ui-gtk3-debuginfoUpgrade avahi-debugsourceUpgrade avahi-gobject-debuginfoUpgrade avahi-gobject | Jul 9, 2025 | Nov 21, 2024 |
| Rocky_linux | — | Upgrade avahi-gobjectUpgrade avahiUpgrade avahi-gobject-develUpgrade avahi-libsUpgrade avahi-autoipdUpgrade avahi-compat-libdns_sdUpgrade avahi-compat-libdns_sd-develUpgrade avahi-autoipd-debuginfoUpgrade avahi-debuginfoUpgrade avahi-glib-debuginfoUpgrade avahi-glib-develUpgrade avahi-compat-howlUpgrade avahi-develUpgrade avahi-glibUpgrade avahi-compat-howl-debuginfoUpgrade avahi-tools-debuginfoUpgrade avahi-gobject-debuginfoUpgrade avahi-debugsourceUpgrade avahi-libs-debuginfoUpgrade avahi-compat-libdns_sd-debuginfoUpgrade avahi-compat-howl-develUpgrade avahi-tools | Feb 5, 2026 | Oct 4, 2025 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub