CVE-2024-52616

Avahi: avahi wide-area dns predictable transaction ids

State: Published
Severity: 5.3 Medium
Published: Nov 21, 2024
Updated: Oct 28, 2026
Reserved: Nov 15, 2024

Description

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	redhat

Weaknesses

CWE-334 Small Space of Random Values

Affected Products

Product	Versions
avahiavahi	before 0.9-rc2Affected
Red Hat Enterprise Linux 9Red Hat	0:0.8-22.el9_6 and laterNot affected
Red Hat Enterprise Linux 9Red Hat	0:0.8-22.el9_6 and laterNot affected
Red Hat Enterprise Linux 7Red Hat
Red Hat Enterprise Linux 8Red Hat
Red Hat OpenShift Container Platform 4Red Hat

References

RHSA-2025:7437vendor-advisory
https://access.redhat.com/security/cve/CVE-2024-52616vdb-entry
RHBZ#2326429issue-tracking
https://github.com/avahi/avahi/pull/577

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.