A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-avahialma-upgrade-avahi-autoipdalma-upgrade-avahi-compat-howlalma-upgrade-avahi-compat-howl-develalma-upgrade-avahi-compat-libdns_sdalma-upgrade-avahi-compat-libdns_sd-develalma-upgrade-avahi-develalma-upgrade-avahi-glibalma-upgrade-avahi-glib-develalma-upgrade-avahi-gobjectalma-upgrade-avahi-gobject-develalma-upgrade-avahi-libsalma-upgrade-avahi-tools | May 22, 2025 | Nov 21, 2024 | |
| Alpine Linux | alpine-linux-upgrade-avahi | Aug 8, 2025 | Nov 21, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-avahiamazon-linux-ami-2-upgrade-avahi-autoipdamazon-linux-ami-2-upgrade-avahi-compat-howlamazon-linux-ami-2-upgrade-avahi-compat-howl-develamazon-linux-ami-2-upgrade-avahi-compat-libdns_sdamazon-linux-ami-2-upgrade-avahi-compat-libdns_sd-develamazon-linux-ami-2-upgrade-avahi-debuginfoamazon-linux-ami-2-upgrade-avahi-develamazon-linux-ami-2-upgrade-avahi-dnsconfdamazon-linux-ami-2-upgrade-avahi-glibamazon-linux-ami-2-upgrade-avahi-glib-develamazon-linux-ami-2-upgrade-avahi-gobjectamazon-linux-ami-2-upgrade-avahi-gobject-develamazon-linux-ami-2-upgrade-avahi-libsamazon-linux-ami-2-upgrade-avahi-qt3amazon-linux-ami-2-upgrade-avahi-qt3-develamazon-linux-ami-2-upgrade-avahi-qt4amazon-linux-ami-2-upgrade-avahi-qt4-develamazon-linux-ami-2-upgrade-avahi-toolsamazon-linux-ami-2-upgrade-avahi-uiamazon-linux-ami-2-upgrade-avahi-ui-develamazon-linux-ami-2-upgrade-avahi-ui-gtk3amazon-linux-ami-2-upgrade-avahi-ui-tools | Dec 20, 2024 | Nov 21, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-avahiamazon-linux-2023-upgrade-avahi-autoipdamazon-linux-2023-upgrade-avahi-autoipd-debuginfoamazon-linux-2023-upgrade-avahi-compat-howlamazon-linux-2023-upgrade-avahi-compat-howl-debuginfoamazon-linux-2023-upgrade-avahi-compat-howl-develamazon-linux-2023-upgrade-avahi-compat-libdns-sdamazon-linux-2023-upgrade-avahi-compat-libdns-sd-debuginfoamazon-linux-2023-upgrade-avahi-compat-libdns-sd-develamazon-linux-2023-upgrade-avahi-debuginfoamazon-linux-2023-upgrade-avahi-debugsourceamazon-linux-2023-upgrade-avahi-develamazon-linux-2023-upgrade-avahi-dnsconfdamazon-linux-2023-upgrade-avahi-dnsconfd-debuginfoamazon-linux-2023-upgrade-avahi-glibamazon-linux-2023-upgrade-avahi-glib-debuginfoamazon-linux-2023-upgrade-avahi-glib-develamazon-linux-2023-upgrade-avahi-gobjectamazon-linux-2023-upgrade-avahi-gobject-debuginfoamazon-linux-2023-upgrade-avahi-gobject-develamazon-linux-2023-upgrade-avahi-libsamazon-linux-2023-upgrade-avahi-libs-debuginfoamazon-linux-2023-upgrade-avahi-toolsamazon-linux-2023-upgrade-avahi-tools-debuginfoamazon-linux-2023-upgrade-avahi-ui-develamazon-linux-2023-upgrade-avahi-ui-gtk3amazon-linux-2023-upgrade-avahi-ui-gtk3-debuginfo | Feb 17, 2025 | Nov 15, 2024 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Nov 21, 2024 | |
| Dell Powerstore Dsa2025342 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Sep 2, 2025 | |
| Dell Powerstore Dsa2026039 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Jan 6, 2026 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-avahi-libs | Mar 17, 2026 | Mar 16, 2026 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-avahi-libs | Dec 12, 2025 | Dec 11, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-avahi-libs | Jan 15, 2026 | Jan 6, 2026 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-avahi-libs | Dec 12, 2025 | Dec 11, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-avahioracle-linux-upgrade-avahi-autoipdoracle-linux-upgrade-avahi-compat-howloracle-linux-upgrade-avahi-compat-howl-develoracle-linux-upgrade-avahi-compat-libdns-sdoracle-linux-upgrade-avahi-compat-libdns-sd-develoracle-linux-upgrade-avahi-develoracle-linux-upgrade-avahi-gliboracle-linux-upgrade-avahi-glib-develoracle-linux-upgrade-avahi-gobjectoracle-linux-upgrade-avahi-gobject-develoracle-linux-upgrade-avahi-libsoracle-linux-upgrade-avahi-tools | May 26, 2025 | Nov 15, 2024 |
| Redhat_linux | redhat-upgrade-avahiredhat-upgrade-avahi-autoipdredhat-upgrade-avahi-autoipd-debuginforedhat-upgrade-avahi-compat-howlredhat-upgrade-avahi-compat-howl-debuginforedhat-upgrade-avahi-compat-howl-develredhat-upgrade-avahi-compat-libdns_sdredhat-upgrade-avahi-compat-libdns_sd-debuginforedhat-upgrade-avahi-compat-libdns_sd-develredhat-upgrade-avahi-debuginforedhat-upgrade-avahi-debugsourceredhat-upgrade-avahi-develredhat-upgrade-avahi-dnsconfd-debuginforedhat-upgrade-avahi-glibredhat-upgrade-avahi-glib-debuginforedhat-upgrade-avahi-glib-develredhat-upgrade-avahi-gobjectredhat-upgrade-avahi-gobject-debuginforedhat-upgrade-avahi-gobject-develredhat-upgrade-avahi-libsredhat-upgrade-avahi-libs-debuginforedhat-upgrade-avahi-toolsredhat-upgrade-avahi-tools-debuginforedhat-upgrade-avahi-ui-debuginforedhat-upgrade-avahi-ui-gtk3-debuginforedhat-upgrade-avahi-ui-tools-debuginfo | May 15, 2025 | Nov 21, 2024 | |
| Rocky_linux | rocky-upgrade-avahirocky-upgrade-avahi-autoipdrocky-upgrade-avahi-autoipd-debuginforocky-upgrade-avahi-compat-howlrocky-upgrade-avahi-compat-howl-debuginforocky-upgrade-avahi-compat-howl-develrocky-upgrade-avahi-compat-libdns_sdrocky-upgrade-avahi-compat-libdns_sd-debuginforocky-upgrade-avahi-compat-libdns_sd-develrocky-upgrade-avahi-debuginforocky-upgrade-avahi-debugsourcerocky-upgrade-avahi-develrocky-upgrade-avahi-glibrocky-upgrade-avahi-glib-debuginforocky-upgrade-avahi-glib-develrocky-upgrade-avahi-gobjectrocky-upgrade-avahi-gobject-debuginforocky-upgrade-avahi-gobject-develrocky-upgrade-avahi-libsrocky-upgrade-avahi-libs-debuginforocky-upgrade-avahi-toolsrocky-upgrade-avahi-tools-debuginfo | Nov 4, 2025 | Oct 4, 2025 | |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Nov 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub