rpm package
suse/avahi-glib2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6
pkg:rpm/suse/avahi-glib2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-52616 | Med | 5.3 | < 0.8-150600.15.6.1 | 0.8-150600.15.6.1 | Nov 21, 2024 | A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs. | |
| CVE-2024-52615 | Med | 5.3 | < 0.8-150600.15.9.1 | 0.8-150600.15.9.1 | Nov 21, 2024 | A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected. | |
| CVE-2023-38471 | — | < 0.8-150600.15.3.1 | 0.8-150600.15.3.1 | Nov 2, 2023 | A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function. | ||
| CVE-2023-38469 | — | < 0.8-150600.15.3.1 | 0.8-150600.15.3.1 | Nov 2, 2023 | A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. |
- affected < 0.8-150600.15.6.1fixed 0.8-150600.15.6.1
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.
- affected < 0.8-150600.15.9.1fixed 0.8-150600.15.9.1
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.
- CVE-2023-38471Nov 2, 2023affected < 0.8-150600.15.3.1fixed 0.8-150600.15.3.1
A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.
- CVE-2023-38469Nov 2, 2023affected < 0.8-150600.15.3.1fixed 0.8-150600.15.3.1
A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.