Summary
Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.
Security Fix(es):
* avahi: Avahi Wide-Area DNS Predictable Transaction IDs (CVE-2024-52616)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | avahi | 0.8-22.el9_6 |
| AlmaLinux · 9 | avahi-autoipd | 0.8-22.el9_6 |
| AlmaLinux · 9 | avahi-compat-howl | 0.8-22.el9_6 |
| AlmaLinux · 9 | avahi-compat-howl-devel | 0.8-22.el9_6 |
| AlmaLinux · 9 | avahi-compat-libdns_sd | 0.8-22.el9_6 |
| AlmaLinux · 9 | avahi-compat-libdns_sd-devel | 0.8-22.el9_6 |
| AlmaLinux · 9 | avahi-devel | 0.8-22.el9_6 |
| AlmaLinux · 9 | avahi-glib | 0.8-22.el9_6 |
| AlmaLinux · 9 | avahi-glib-devel | 0.8-22.el9_6 |
| AlmaLinux · 9 | avahi-gobject | 0.8-22.el9_6 |
| AlmaLinux · 9 | avahi-gobject-devel | 0.8-22.el9_6 |
| AlmaLinux · 9 | avahi-libs | 0.8-22.el9_6 |
| AlmaLinux · 9 | avahi-tools | 0.8-22.el9_6 |
Vulnerabilities 1
-
Medium 5.3
Avahi: avahi wide-area dns predictable transaction ids
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.