rpm package
suse/avahi&distro=SUSE Linux Micro 6.1
pkg:rpm/suse/avahi&distro=SUSE%20Linux%20Micro%206.1
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-24401 | — | < 0.8-slfo.1.1_5.1 | 0.8-slfo.1.1_5.1 | Jan 24, 2026 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the a | ||
| CVE-2024-52616 | Med | 5.3 | < 0.8-slfo.1.1_2.1 | 0.8-slfo.1.1_2.1 | Nov 21, 2024 | A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs. | |
| CVE-2024-52615 | Med | 5.3 | < 0.8-slfo.1.1_4.1 | 0.8-slfo.1.1_4.1 | Nov 21, 2024 | A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected. |
- CVE-2026-24401Jan 24, 2026affected < 0.8-slfo.1.1_5.1fixed 0.8-slfo.1.1_5.1
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the a
- affected < 0.8-slfo.1.1_2.1fixed 0.8-slfo.1.1_2.1
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.
- affected < 0.8-slfo.1.1_4.1fixed 0.8-slfo.1.1_4.1
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.